Cyber Resilience Act: How to prepare your organisation for the new EU cyber security requirements
Is your product ready for the EU’s strict new cybersecurity requirements?
Join our webinar on November 17 2026 at 10:00 AM to get a complete overview of what mandatory 24-hour vulnerability reporting and "secure by design" CE marking mean for your product roadmap—ensuring your digital products remain market-ready.
In this webinar, we guide you through how to practically prepare your organisation for the EU Cyber Resilience Act (CRA). You will get a clear overview of which requirements apply to your products, how to handle reporting and documentation, and how to avoid heavy fines and loss of market access.
The webinar hosts are Lone Forland, Product and Information Security Expert, and GRC Advisor Raja Hamza Ali.
Raja has deep, hands-on experience with the Cyber Resilience Act (CRA) and advises organisations on everything from complex compliance frameworks to practical implementation. He is a specialist in translating complex EU regulations into clear, operational processes.
Lone and Raja will also demonstrate how you can leverage your existing security efforts: How far along are you with the CRA if you already work with ISO 27001, NIS2 or other standards?
What we will cover in the webinar
- Scope and classification – Who must comply with the new rules? We examine which products are classified as "important" or "critical" and what that means for your security requirements.
- Requirements and reporting – What do you actually need to do in practice? We look at key cyber security requirements, how to build an effective vulnerability management process, and how the 24-hour incident reporting works.
- Consequences and shortcuts – What are the risks of non-compliance? We review fines of up to EUR 15 million (or 2.5% of global annual turnover) and show you how to achieve an easier path to compliance by building on your current ISO 27001 framework.