Until the CRA reporting duty.
The Cyber Resilience Act is binding for manufacturers, importers and distributors of products with digital elements on the EU market. NewTec is your partner for putting it into practice: from maturity and gap analysis through standard-compliant security product development to safe operation in the field.
- ISA/IEC 62443
- ETSI EN 303 645
- IEC 81001-5-1
- IEC 63452
A few clicks to your security training!
Regulations such as the Cyber Resilience Act (CRA), NIS2 or IEC 62443 explicitly call for proof of qualified specialists. Sometimes the quickest lever is not a service package but a targeted training course, keeping the topic firmly in-house with your own team.
At the NewTec Academy we pool our knowledge in open and in-house formats: compact, hands-on and led by trainers drawn from live projects.
- ✓Training on CRA, NIS2, IEC 62443 and the Secure Development Lifecycle
- ✓Tailored to your audience: development, product management or procurement
- ✓Training materials and checklists to put straight to work
- ✓Documentation of every training measure, audit-proof for the authorities
Three stages. One CRA-compliant product.
NewTec stays with you across the whole product lifecycle, from your processes through development to operation.
Enabling: processes and capabilities
To sharpen your security and development processes, we assess how mature your workflows are and, on the basis of a gap analysis, give you concrete recommendations for improvement: CRA gap analysis, rollout of CRA-compliant processes, documentation in line with the CRA, plus workshops and training to build security awareness and know-how.
Security product development
Our security engineers help you develop cyber-secure products efficiently and in line with the rules: product classification, cyber security management plan, development and documentation in line with the CRA, risk analyses across the entire lifecycle (TARA, IRA, DRA), secure update strategies and support with the conformity assessment.
Safe operation
For safe operation we support you with a broad set of managed services: automated vulnerability monitoring, vulnerability and update management, a customer-specific PSIRT and the provision of a public key infrastructure (PKI).
Go deeper. Articles from our knowledge hub.
Let us talk about your CRA compliance.
We gauge how mature your processes are, classify your product under the CRA and show you the fastest route to cyber-resilient products.