Ask the Experts: How to Build Cyber Resilience Act (CRA) Compliant Connected Products

The EU Cyber Resilience Act (CRA) introduced new cybersecurity requirements for products with digital elements. For companies building connected devices, it is important to understand not only the regulation itself, but also how secure components, standards, documentation, and reporting processes contribute to compliance.

Join u-blox, NXP Semiconductors, and Bureau Veritas for a practical webinar designed for product managers, engineering teams, security teams, and compliance professionals.

The on-demand session introduces the CRA, outlines a roadmap for preparation, and discusses how u-blox and NXP technologies and services can support secure product development. Bureau Veritas explain how harmonized standards may be used, what presumption of conformity means, and how CRA reporting obligations are expected to work.

Agenda:

• Introduction to EU Cyber Resilience Act (CRA) 
• Roadmap to CRA (including walk through of material)  
• Building end products using NXP components
• Information on Harmonized Standards
• Reporting obligations of CRA explained

• Live Q&A session 

   

  Speakers

				Jenirathese Nadar Regional Marketing Manager - IoT Security and MCUs at NXP Semiconductors Jenirathese Nadar is a Regional Marketing Manager for Security and NFC at NXP Semiconductors, overseeing strategic initiatives across the EMEA region. With over a decade of experience in the security domain, Jenirathese currently focuses on secure microcontrollers and authentication technologies.  LinkedIn
				Hari Vigneswaran Senior Product Manager – IoT and cybersecurity at u-blox Hari Vigneswaran is a Senior Product Manager for IoT wireless modules and is responsible for cybersecurity of u-blox short range radio product portfolio. With more than 10 years of experience in the short-range wireless communications industry, Hari has extensive expertise in Bluetooth, Wi-Fi, Thread, and embedded security. LinkedIn
				Michael Beine Business Unit Manager - Cyber Security at Bureau Veritas Michael Beine has over 20 years of experience in the Testing, Inspection, and Certification (TIC) industry. He has led testing and approval activities for a wide range of wireless technologies and developed testing procedures and services for connected and IoT devices. In recent years, his work has focused on cybersecurity. He acts as a cybersecurity auditor for industrial automation components and systems in line with the IEC 62443 standard and leads cybersecurity services at Bureau Veritas Consumer Product Services in Germany. He is a recognized expert in regulatory cybersecurity compliance for connected products, including RED-DA and the Cyber Resilience Act (CRA). LinkedIn

 

Questions from the webinar

CRA essentials

Get a clear overview of the Cyber Resilience Act and what it means for manufacturers, suppliers, distributors and customers. This section addresses the key requirements, responsibilities, deadlines and considerations for both new and existing products.

Scope, standards and compliance

Understand which products and services may fall within the CRA’s scope and how manufacturers can prepare to demonstrate compliance. The questions cover conformity assessment, relevant standards, documentation, product classification and the responsibilities of different parties.

Secure product design and implementation

Explore practical considerations for designing, integrating and maintaining products in line with CRA requirements. This section looks at risk assessments, hardware and software security, legacy interfaces, product integration and the use of security capabilities provided by NXP and u-blox.

Vulnerability reporting and product support

Learn how vulnerability reporting, security advisories and ongoing product support work under the CRA. The questions explain reporting responsibilities, SBOMs, security.txt, product updates, support periods and how u-blox and NXP communicate security information.