Training > Cybersecurity > EU Cyber Resilience Act (CRA) for Embedded Systems (AC6403)
INSTRUCTOR-LED COURSE

EU Cyber Resilience Act (CRA) for Embedded Systems (AC6403)

Build cybersecurity into the design of the embedded products you ship to the EU. The Cyber Resilience Act makes security a legal condition for selling in the EU, with full application from December 2027. This course shows what that means for firmware, vulnerability handling, and the supply chain behind a product.

Who Is It For
For embedded engineers, system architects, product managers, and compliance and test engineers who need to bring products sold in the EU into line with the CRA.
read less read more
What You’ll Learn
Determine whether a product is in scope and which class it falls into, and turn the essential requirements into design choices. Set up vulnerability handling for the support period and recognize when a firmware update is a substantial modification.
read less read more
What It Prepares You For
Contribute to CRA compliance on embedded products, from reporting exploited vulnerabilities to preparing technical documentation and the EU declaration of conformity. These are practical skills for engineering, product, and compliance roles as cybersecurity requirements for CE marking take effect.
read less read more
Course Outline
Expand All
Collapse All
Introduction to the Cyber Resilience Act
- Introduction to the CRA
- CRA in Context
- How the CRA Classifies Products
- Relation to Existing EU Laws
Essential Cybersecurity Requirements
- Manufacturer Responsibilities
- Managing Vulnerabilities and Reporting
- Conformity
- Handling Substantial Modifications
Compliance and Conformity Assessment
- CE Marking and Conformity Procedures for Digital Products
- Classification of Products (Important vs. Critical)
- Case Study: Applying Conformity Assessments to Embedded Systems
Lifecycle Security Management
- Obligations for Manufacturers
- Securing Supply Chains and Third-Party Components
- Best Practices for Risk Assessments and Due Diligence
Implementations for Cyber Resilience Compliance
- Requirements and Platforms
- Secure Boot and Key Protection
- Hardening and Updates
- Tools and Automation
- Vulnerability Handling and Evidence
Communication Protocols and Network Systems
- CRA Requirements for Communication
- Hardening IP Networks and TLS
- Wireless and Low-Power Networks
Prerequisites
Basic knowledge of embedded systems, including firmware, boot, and update, and of the product development lifecycle. Familiarity with open source components and basic networking is helpful.
updated SG
$995
Dates don't work? Check out our partner schedule
100% Money Back Guarantee
Includes
Live Online (Virtual)
1 day of Instructor-led class time
Discussions & Assignments
Resources & Course Material
Certificate of Completion
Experience Level: Intermediate
Training more than 10 people?Get a corporate quote
How To Register Someone Other Than YourselfInstructions