CRA Expects Good Citizens: Be Available and Do No Harm
Under the EU Cyber Resilience Act, securing your product isn’t enough—you must protect broader network availability. Explore how to implement CRA Part I requirements 2(h) and 2(i) through defence in depth, DoS mitigation, and responsible connected device architecture.
Access Control Under the CRA: More Than Just a Login Screen
Part #6 of our Human Written CRA series unpacks Annex I Part I requirement 2(d): from MFA and machine-to-machine TLS to unauthorized access reporting, surface reduction, and substantial modification triggers.