The EU CRA
Is Coming
If you sell software or connected products in Europe, it applies to you.
Selling software in Europe?
The CRA applies to you.
The EU Cyber Resilience Act sets security rules for software and products with digital components sold in Europe. It covers US companies that sell there too, and many security teams haven’t looked at it yet.
Nariman Aga-Tagiyev helps companies get ready for it. He runs SecureHabits, which does CRA readiness assessments, and he’s a long-time member of the OWASP SAMM core team. He joins Dan Barahona to explain what the CRA expects from manufacturers, the two new standards the EU just accepted, and where to start.
Bring questions. Nariman will take them live.
What we’ll cover
- Who it applies toWhich software and products are in scope, and why US companies can’t ignore it.
- The new standardsThe two standards the EU just accepted, and what they ask of manufacturers.
- Getting readyWhere to start on CRA readiness before the deadlines arrive.
Nariman Aga-Tagiyev
Nariman Aga-Tagiyev is the founder of SecureHabits, which helps companies with OWASP SAMM and DSOMM assessments, threat modeling and EU Cyber Resilience Act readiness. He is an EU CRA standardization expert at NEN, the Dutch standards body, and a member of the OWASP SAMM core team. He has more than 24 years in software development and has focused on product security since 2016.