BLOG · PRODUCT CYBERSECURITY

SBOM

Practical articles for manufacturers of connected products. SBOM, CVE management, PSIRT, CRA obligations — no fluff.

SBOM · 6 min

CRA SBOM Requirements: What the EU Cyber Resilience Act Actually Asks For

What the EU Cyber Resilience Act requires for SBOMs: format, depth, technical documentation, deadlines, SPDX vs CycloneDX, and how to handle embedded products.

Not sure where your company stands on CRA compliance?

Our maturity simulator gives you a personalised score in 10 minutes.

CRA Simulator CRA Checklist