Cyber Resilience Act updates and the Vulnerability Reporting Obligations – what does it entail?

📅 Date: Wednesday, 16 September
🕙 Time: 10:00 - 10:50  CET

The Reporting obligations under CRA are now in force, starting from 11^th of September 2026 – but what does this mean?

Join our webinar to learn more about the reporting obligations and a more explanatory, practical and engaging overview of the latest CRA news and updates. Whether you're a business leader, product manager, engineer, developer or compliance professional, you'll gain valuable insights into CRA, what's changing and how to prepare.

We will take you through the reporting obligations, latest news and updates regarding CRA as well as standardization status, and other relevant information!

In this session, you'll learn:

• Reporting obligations: Vulnerability Reporting Obligations for Manufacturers is mandatory from 11th of September, and how to take action!
• A brief introduction to CRA key concepts and questions
• The latest CRA Developments and News: What they mean for your organization
• How upcoming requirements may affect product design, development, and maintenance
• Introduce what technical areas will be affected by the CRA from a design, technical point-of-view
• Key timelines, milestones, and actions to consider now
• Practical steps / recommendation to strengthen your compliance readiness and reduce risk

Learn how Nemko can support your CRA journey

Our experts will translate complex regulatory updates into clear, actionable takeaways that both technical and business teams can understand. Bring your questions and get answers to ensure your organization stays ahead on one of the most important cybersecurity regulations affecting internet connected products in the EU.

All participants will get a free voucher for a 30min conference session with one of our experienced Cyber Security Evaluators – for a more specified and tailored Q&A session.

Can’t make it? Sign up anyway and get the recording and presentation after the webinar!

Webinar hosts

Daniel Havre | Senior Cybersecurity Evaluator 
Daniel Havre holds an engineering MSc degree from NTNU and is currently working as a Senior Cyber Security Evaluator at Nemko. He is certified for Common Criteria evaluation as well as being an ETSI/EN 303 645 evaluator.

Hans Gunneng Tømmerbakk | Cybersecurity Technical Manager
Hans Gunneng Tømmerbakk holds a BSc in Computer Engineering from UiA and is currently working as the Technical Manager at the Nemko cyber security laboratory in Taiwan. He is a certified penetration tester as well as being experienced in IoT evaluations & testing to several international standards, including e.g., EN 18031 and ETSI EN 303 645.