https://goregulus.com/ Guides to the EU Cyber Resilience Act for manufacturers: scope, classification, essential requirements, reporting and technical documentation. Thu, 22 Oct 2026 09:00:00 GMT en https://goregulus.com/wp-content/uploads/2026/01/cropped-favicon-32x32.png https://goregulus.com/ 32 32 https://goregulus.com/cra-requirements/ https://goregulus.com/cra-requirements/ Tue, 20 Oct 2026 09:00:00 GMT CRA Requirements All 22 CRA essential requirements of Annex I: 14 for the product and 8 for vulnerability handling, what each one asks for and the evidence behind it. https://goregulus.com/cra-funding/secure-open-call/ https://goregulus.com/cra-funding/secure-open-call/ Sun, 18 Oct 2026 09:00:00 GMT CRA Basics The SECURE open call co-finances 50% of CRA work for SMEs, up to EUR 30,000, until 11 December 2026. What it pays for, what it does not and the timeline. https://goregulus.com/cra-classification/connected-toy/ https://goregulus.com/cra-classification/connected-toy/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Connected toys that talk, film or track location are Class I under the CRA. Which smart toys qualify, which stay default, and where kids' wearables fit. https://goregulus.com/cra-classification/firewall/ https://goregulus.com/cra-classification/firewall/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Firewalls, IDS, IPS and WAFs are Class II under the CRA, industrial or not. What counts, what does not, and why self-assessment is not an option. https://goregulus.com/cra-classification/iot-gateway/ https://goregulus.com/cra-classification/iot-gateway/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Usually default: the CRA has no IoT gateway category. How to classify a gateway by its core function, with the official descriptions of 2025/2392. https://goregulus.com/cra-classification/microcontroller/ https://goregulus.com/cra-classification/microcontroller/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Microcontrollers can be default, Class I, Class II or critical under the CRA. How security functions and AVA_VAN levels decide it, and what OEMs inherit. https://goregulus.com/cra-classification/plc-industrial-control/ https://goregulus.com/cra-classification/plc-industrial-control/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics PLCs, SCADA and HMIs are not in Annex III or IV of the CRA. Why many tools still say Class II, and when an industrial product does move up a class. https://goregulus.com/cra-classification/router/ https://goregulus.com/cra-classification/router/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Routers, internet modems and managed switches are Class I under the CRA. What counts, what stays out, and when self-assessment is still possible. https://goregulus.com/cra-classification/security-software/ https://goregulus.com/cra-classification/security-software/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics VPNs, password managers, antimalware and operating systems are Class I under the CRA. What counts, what does not, and how SaaS and open source fit. https://goregulus.com/cra-classification/smart-home-security/ https://goregulus.com/cra-classification/smart-home-security/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Smart locks, security cameras, baby monitors and alarms are Class I under the CRA, and so are the hubs and apps that control them. What counts and why. https://goregulus.com/cra-classification/smart-meter-gateway/ https://goregulus.com/cra-classification/smart-meter-gateway/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Smart meter gateways are critical products in Annex IV of the CRA, gas and heat included. What the description covers and which conformity route applies. https://goregulus.com/cra-classification/wearable/ https://goregulus.com/cra-classification/wearable/ Sat, 17 Oct 2026 09:00:00 GMT CRA Basics Health-tracking wearables and wearables for children under 14 are Class I under the CRA. What counts, where medical devices fall, and the grey areas. https://goregulus.com/cra-basics/cra-annex-iii-class-i-vs-class-ii/ https://goregulus.com/cra-basics/cra-annex-iii-class-i-vs-class-ii/ Mon, 28 Sep 2026 13:58:08 GMT CRA Basics Confused about CRA Annex III Class I vs Class II? This guide compares classification criteria, examples, and obligations to help you comply with EU regulations. https://goregulus.com/cra-basics/cra-logging-retention-requirements/ https://goregulus.com/cra-basics/cra-logging-retention-requirements/ Mon, 14 Sep 2026 13:42:05 GMT CRA Basics Master CRA logging retention requirements with our guide. Learn about log scope, retention periods, GDPR interaction, and documentation for IoT vendors. https://goregulus.com/cra-basics/cra-cryptographic-key-management-requirements/ https://goregulus.com/cra-basics/cra-cryptographic-key-management-requirements/ Mon, 31 Aug 2026 13:54:02 GMT CRA Basics Master CRA cryptographic key management requirements: key lifecycle controls, HSMs, technical documentation, and a compliance roadmap. https://goregulus.com/cra-basics/cra-secure-update-architecture-requirements/ https://goregulus.com/cra-basics/cra-secure-update-architecture-requirements/ Mon, 24 Aug 2026 13:28:13 GMT CRA Basics CRA secure update architecture requirements - Master mandatory controls, architectural patterns, and technical files for Annex II/VII compliance in 2026. https://goregulus.com/cra-basics/cra-coordinated-vulnerability-disclosure-policy-template/ https://goregulus.com/cra-basics/cra-coordinated-vulnerability-disclosure-policy-template/ Mon, 17 Aug 2026 13:40:20 GMT CRA Basics Download our CRA coordinated vulnerability disclosure policy template. Customise, implement, and evidence your CVD policy for 2026 EU compliance. https://goregulus.com/cra-basics/cra-vulnerability-handling-records-audit-trail/ https://goregulus.com/cra-basics/cra-vulnerability-handling-records-audit-trail/ Mon, 10 Aug 2026 13:04:25 GMT CRA Basics CRA vulnerability handling records audit trail - Ensure compliance with robust CRA vulnerability handling records audit trail processes. Discover essential tips https://goregulus.com/cra-basics/cra-conformity-documentation-retention-period/ https://goregulus.com/cra-basics/cra-conformity-documentation-retention-period/ Mon, 03 Aug 2026 13:29:51 GMT CRA Basics Master CRA conformity documentation retention period rules. Learn what to keep, for how long, and build an audit-ready workflow for 2026. https://goregulus.com/cra-basics/cra-log-integrity-tamper-resistance/ https://goregulus.com/cra-basics/cra-log-integrity-tamper-resistance/ Mon, 27 Jul 2026 13:44:39 GMT CRA Basics Master CRA log integrity tamper resistance. Our guide breaks down EU requirements, technical controls, and how to achieve compliance before the deadline.