COURSE · FREENEEDS REVIEW
Cyber Resilience Act Fundamentals: Scope, Responsibilities and First Steps
Six lessons on the purpose and structure of the regulation, products and economic operators, the essential requirements, vulnerability handling and reporting, conformity assessment, and how to build a preparation plan — followed by an assessment.
What you will learn
- Explain what the Cyber Resilience Act regulates and why, using Article 1.
- Find your way through the chapters, articles, annexes and recitals of the regulation.
- Distinguish the requirements on the product from the requirements on the manufacturer's processes.
- State the key dates of application and the transitional rule for products already on the market.
- Apply the definition of a product with digital elements, including remote data processing solutions.
- Check the scope condition of Article 2(1) and the exclusions of Article 2.
- Identify the role of each economic operator and its main obligations.
- Recognise when an importer, a distributor or another person takes on the obligations of a manufacturer.
Lessons
- 1. Lesson 1 — Purpose and legal structure of the Cyber Resilience ActWhat the Cyber Resilience Act regulates, how its text is organised and which dates matter: the map you need before reading the obligations.20 min
- 2. Lesson 2 — Products with digital elements and economic operatorsWhich products the Cyber Resilience Act covers, what it excludes, and who carries which obligations: manufacturers, importers, distributors and others.30 min
- 3. Lesson 3 — The main requirements for products and manufacturersThe essential cybersecurity requirements of Annex I, the manufacturer's risk assessment, the support period and the documents that must accompany a product.35 min
- 4. Lesson 4 — Vulnerability handling and reporting obligationsHow Article 14 reporting works: what must be notified, to whom, within which deadlines, and how it differs from day-to-day vulnerability handling.35 min
- 5. Lesson 5 — Conformity assessment, EU declaration and CE markingWhich conformity assessment procedure applies to default, important and critical products, and what the EU declaration of conformity and CE marking mean.30 min
- 6. Lesson 6 — Building a preparation plan for the Cyber Resilience ActTurning the regulation into a practical plan: inventory, scoping, gap analysis, reporting readiness, documentation and a timetable towards 11 December 2027.30 min