Cybersecurity & CRA
CRA readiness audit and gap analysis
A structured review of your product's firmware, hardware and processes against the engineering requirements of the Cyber Resilience Act.
· by BCF Embedded engineering team
Input and output
What we need from you
- Product description and intended use
- System architecture
- Software stack and components
- Current update and vulnerability processes
What you receive
- Report with identified gaps
- Prioritised list of actions
- Implementation plan with effort estimates
How the audit runs
- 01
Kick-off
Scope, products and documents to review.
- 02
Review
Architecture, boot chain, updates, SBOM and processes.
- 03
Workshop
Findings discussed with your engineers.
- 04
Report
Gaps, priorities and plan.
Duration
Duration depends on the number of products and available documentation. We confirm it after the first call.
Discuss your project
Describe your device and goal. An engineer replies within one business day.