October 1 @ 9:30 – 17:00 CEST
The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance.
This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops is organised throughout Europe.
Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) – ETSI and CEN-CENELEC – are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.
The event is organised by the EU-funded projects CYBERSTAND.eu and STAN4CRA.eu with the support of the Ministry of Economic Affairs and Climate, the workshops bring together key EU-funded experts and projects working on the design of SME-friendly standards and CRA compliance tools.
Why join
- Understand what the CRA requires and its implications for SMEs.
- Learn which standards matter and how they support compliance.
- Presentations from CRA standards rapporteurs on ongoing standardisation work.
- Discover compliance tools, practical guides, and funding available through CRA-related EU-funded projects.
- Gain practical insights tailored to SME on how CRA requirements translate into product development and conformity processes.
Agenda
The event will be held in English.
| Time (CEST) | Session | Speakers |
|---|---|---|
| 09:00 – 09:30 | Onsite registration and welcome coffee | |
| 09:30 – 09:45 | Event introduction,Opening remarks | Mr. Martijn Lucassen, Director of Digital Economy, Ministry of Economic Affairs and Climate Mr. Marc Ritter, Manager Strategic Relations and Business Development, NEN |
| 09:45 – 10:30 | Setting the scene: Introduction to the Cyber Resilience Act (CRA), Role of European Standardisation Organisations (ESOs) and CRA Standardisation state of play | Camille Dornier, European Commission (remote) Yves Leboucher, CEN-CENELEC (remote) Kim Nordström, ETSI Technical Officer |
| 10:30 – 10:45 | Coffee break | |
| 10:45 – 11:45 | CRA Standards Presentation by Rapporteurs | Christian Horcert, CrabNebula Julien Saadé, Internet of Trust Angelo D’Amato, Vulnir |
| 11:45 – 12:30 | Free European tools to support CRA compliance | Nicholas Ferguson, CYBERSTAND.eu coordinator and Trust-IT Services Anna Born, SECURE and Centre for Cybersecurity Belgium Patricia Shields, CRA-AI and Cybercert labs Ben Van Erck, CRA-AI and and Refracted Security Wim Stoffelen, CRACY and LSEC – Leaders In Security |
| 12:30 – 13:30 | Lunch break | |
| 13:30 – 14:45 | CRA in practice – Dutch experiences | Ben Kokx, Philips & Chair CEN/CLC/JTC13/WG9 Wendy Tonks, OMRON Raluca Viziteu, ASML |
| 14:45 – 15:15 | Participation in Cybersecurity standardization: ETSI and CEN/CENELEC | Inge Piek, NEN |
| 15:15 – 15:45 | Coffee break | |
| 15:45 – 16:15 | Funding opportunities for implementing CRA in the Netherlands | Nina Huijberts, NCC-NL Anna Born, SECURE and Centre for Cybersecurity Belgium |
| 16:15 – 16:45 | Practical demonstration of “Meldplicht” for CRA | Mauro Madeira and Jelmer Groeneveld, Live demonstration by NCSC |
| 16:45 – 17:00 | Closing Remarks | |
| 17:00 – 18:00 | Networking reception on-site | |