Cybersecurity_Productdevelopment_Header
Cybersecurity - Secure Product Development

Cybersecurity
development services

Secure electronics and software development in accordance with the CRA, compliant with IEC 62443, EN 18031 and other standards.

Pillars_SecurityProductDevelopment_Engineering


CRA-compliant product development for embedded systems: secure, resilient and market-ready

The Cyber Resilience Act (CRA) requires manufacturers to integrate cybersecurity firmly into the product lifecycle. Companies must have fully implemented the EU legislation by November 2027. This applies both to products with digital elements that are already on the market and to new product developments.

With our cybersecurity development services, we support you in implementing the legal requirements. Although the CRA refers to harmonised standards for implementation, none of the relevant standards has actually been harmonised yet. Nevertheless, companies do not have to operate in a vacuum. Top candidates already exist for individual industries. Products that meet the security requirements of IEC 62443-4-2 and have been developed in accordance with IEC 62443-4-1 largely comply with the requirements of the CRA. EN 18031 (radio equipment) also already addresses the requirements today.

Compliant with
  • CRA
  • IEC 62443-4-1
  • IEC 62443-4-2
  • EN 18031
  • and others
NewTec work packages

Modular, practical, tailored to your needs.

From cybersecurity management and threat and risk analyses through to secure implementation, verification and application-oriented guidelines: with our cybersecurity development services, we support your product development holistically, in a structured way and in compliance with the relevant standards. To this end, we offer work packages that you can select flexibly according to your needs. Each package specifically covers individual phases of secure product development and delivers the relevant documents as evidence. On request, we can also take on your entire security product development along the V-model.

Work packageTARA
Work packageSecurity Concept
Work packageSecurity Assessment
Work packageSecurity Testing
Cyber Security Management
Security Context Analysis
Threat Analysis
Risk Assessment
Deriving/Proposing of Countermeasures
Deriving of Security Requirements from Countermeasures
Requirements Mapping
Deriving/Proposing Secure Architecture/Design
Secure Implementation
Writing Security Guidelines
Security Requirements Testing
optional
Vulnerability Testing
Threat Mitigation Testing
Penetration Testing
Work package

TARA

  • Cyber Security Management
  • Security Context Analysis
  • Threat Analysis
  • Risk Assessment
  • Deriving/Proposing of Countermeasures
  • Deriving of Security Requirements from Countermeasures
  • Requirements Mapping
  • Deriving/Proposing Secure Architecture/Design
  • Secure Implementation
  • Writing Security Guidelines
  • Security Requirements Testing
  • Vulnerability Testing
  • Threat Mitigation Testing
  • Penetration Testing
Work package

Security Concept

  • Cyber Security Management
  • Security Context Analysis
  • Threat Analysis
  • Risk Assessment
  • Deriving/Proposing of Countermeasures
  • Deriving of Security Requirements from Countermeasures
  • Requirements Mapping
  • Deriving/Proposing Secure Architecture/Design
  • Secure Implementation
  • Writing Security Guidelines
  • Security Requirements Testing
  • Vulnerability Testing
  • Threat Mitigation Testing
  • Penetration Testing
Work package

Security Assessment

  • Cyber Security Management
  • Security Context Analysis
  • Threat Analysis
  • Risk Assessment
  • Deriving/Proposing of Countermeasures
  • Deriving of Security Requirements from Countermeasures
  • Requirements Mapping
  • Deriving/Proposing Secure Architecture/Design
  • Secure Implementation
  • Writing Security Guidelines
  • optionalSecurity Requirements Testing
  • Vulnerability Testing
  • Threat Mitigation Testing
  • Penetration Testing
Work package

Security Testing

  • Cyber Security Management
  • Security Context Analysis
  • Threat Analysis
  • Risk Assessment
  • Deriving/Proposing of Countermeasures
  • Deriving of Security Requirements from Countermeasures
  • Requirements Mapping
  • Deriving/Proposing Secure Architecture/Design
  • Secure Implementation
  • Writing Security Guidelines
  • Security Requirements Testing
  • Vulnerability Testing
  • Threat Mitigation Testing
  • Penetration Testing
Request your preferred package. →
„Wir bieten Ihnen maßgeschneiderte Leistungen passgenau abgestimmt auf die Anforderungen und den Bedarf Ihres Projekts. Auch ausserhalb unserer Leistungspakete.“
Matthias Lai
Head of Security
ASSESSMENT · PENETRATION TEST · CRA
ITSecurityTestat
Safe operation: assessments & penetration testing

Independent proof of security and compliance.

With requirements such as the Cyber Resilience Act or specifications from EU notified bodies, traceable security assessments are becoming more important. NewTec carries out structured penetration tests & assessments to international standards.

The result is the NewTec IT security attestation: independent proof of the technical security of your product. A strong argument for approvals, customer requirements and audits, and towards supervisory authorities such as the FDA or EU notified bodies.

  • ✓IEC 62443: industrial cybersecurity
  • ✓ISO/SAE 21434: automotive cybersecurity
  • ✓IEC 81001-5-1: health software security
NT IT security assessments →
Talk to us

Let’s talk about your security project.

We place your use case in line with the standards, determine the maturity of your processes and show the fastest route to cyber-resilient products.

Book a call →