Understand the requirements, identify the gaps, and plan your next steps.
The EU Cyber Resilience Act (CRA) introduces cybersecurity requirements for a wide range of connected hardware and software products sold in the EU. It requires manufacturers to consider cybersecurity throughout the product lifecycle, from development to ongoing vulnerability handling.
Not sure what CRA means for your products? We can help you find out.
If you manufacture, import, or distribute products with digital elements, CRA may introduce new requirements for your products and processes.
Most CRA requirements apply from 11 December 2027, while manufacturer reporting obligations have applied since 11 September 2026. With some obligations already in effect, now is the time to understand what CRA means for your products, identify potential gaps, and prepare for the requirements ahead.
You don't need to navigate CRA alone. Nemko Scandinavia can help you understand what the requirements mean for your products and turn them into practical next steps.
Depending on your needs, we can help you:
• Assess your CRA readiness
• Identify gaps in your products, documentation, and processes
• Prioritize next steps towards compliance
• Test and evaluate the cybersecurity of your products
If you are a small or medium-sized company, you may also be eligible for financial support.
Through the EU-funded SECURE programme, eligible SMEs can apply for funding covering 50% of eligible CRA-related project costs, up to €30,000 per company. The current application deadline is 11 December 2026.
Not sure if the funding could be relevant for your company?
Talk to us about your CRA needs and planned activities. We can help you understand how Nemko Scandinavia can support your preparations and discuss whether the funding opportunity could be relevant to your project.
Note: Funding is subject to SECURE programme eligibility, availability and terms. Funding is not guaranteed.