Curriculum
- 8 Sections
- 21 Lessons
- 10 Minutes
Expand all sectionsCollapse all sections
- CHAPTER 1. What is the difference between directive, regulation and standard?(estimated time: 3 minutes)1
- CHAPTER 2. Cyber Resilience Act (CRA)(estimated time: 50-60 minutes)9
- 2.1Section 1. Regulatory background and framework10 Minutes
- 2.2Section 2. Why is regulation necessary?3 Minutes
- 2.3Section 3. Impact of regulation5 Minutes
- 2.4Section 4. Timeline for the implementation of the CRA2 Minutes
- 2.5Section 5. The CRA and CE marking2 Minutes
- 2.6Section 6. Violations to the CRA, sanctions and corrective measures10 Minutes
- 2.7Section 7. Compliance process. Manufacturer classification, obligations and approval process20 Minutes
- 2.8Section 8. What Actions Does The Cra Require?1 Minute
- 2.9Section 9. Radio Equipment Directive (RED) and Cyber Resilience Act (CRA)3 Minutes
- CHAPTER 3. IEC 62443(estimated reading time: 30-40 minutes)4
- CHAPTER 4. Pentest(estimated reading time: 60 minutes)4
- CHAPTER 5. Communication Robustness Test (CRT)(estimated reading time: 30 minutes)1
- CHAPTER 6. Functional testing. Comparison between CRA and IEC-62443(estimated reading time: 3 minutes)1
- Practical activities(estimated time: 30 minutes)1
- Evaluation test1
Section 4. Timeline for the implementation of the CRA

The compliance with the CRA will be mandatory as of December 10th, 2027.
Reporting on vulnerabilities will be mandatory as of September 2026.

