Preparing for CRA implementation involves more than understanding the regulation. As manufacturers prepare to comply with the Cyber Resilience Act (CRA), determining which products fall within scope is only part of the challenge. Organizations must also establish governance structures, adapt internal processes, manage vulnerability reporting obligations, assess supply-chain dependencies and maintain compliance throughout the product lifecycle. In this article, Antti Tolvanen discusses: ▪ Why organizations should view CRA preparedness through a business risk lens ▪ Common implementation challenges organizations continue to face ▪ How organizations can move from regulatory interpretation to implementation Read the article: https://lnkd.in/eD8qTZJX
DNV Cyber
Professional Services
We safeguard your critical, enabling your business to thrive.
About us
DNV Cyber is a leading cybersecurity services provider. We empower businesses with complex needs to become safer and more resilient with tailored solutions. Our global team of more than 500 experts brings over 30 years of IT and industrial control system security experience to your business, helping you breathe easier and perform better. We identify, prioritize, and communicate risk, guide you through regulations, and align your cybersecurity with your business goals. We bring you technology and threat insight, help you to secure cyber investments, and implement cost-effective security control measures. We detect and respond to threats, ensuring continuous improvement and quick recovery. We ask questions and listen, speaking your industry's language. We collaborate and share insights, setting industry standards and delivering best practice. We safeguard your critical, enabling your business to thrive. DNV Cyber was formed by merging Nixu, Applied Risk and DNV in 2024.
- Website
-
www.dnv.com/cyber
External link for DNV Cyber
- Industry
- Professional Services
- Company size
- 501-1,000 employees
- Headquarters
- Oslo
Updates
-
Geopolitical tensions, AI-assisted threat activity and the growing connection between IT and operational technology are changing the risk landscape for organisations that operate critical infrastructure and essential services. The latest edition of DNV Cyber Threat Insights examines what these developments mean in practice and why they deserve attention from leaders, security teams and operational stakeholders. Topics include: • Suspected cyber compromises affecting tankers • Hacktivist campaigns following geopolitical developments • Long-term state investment in cyber capabilities • AI-supported threat operations • Ransomware-as-a-service and software supply-chain risk • Device-code phishing attacks that exploit legitimate authentication workflows While the tactics differ, the pattern is consistent. Threat actors continue to combine trusted technologies, known vulnerabilities and external events to improve their chances of success. The report also highlights practical questions and recommendations that can help organisations strengthen cyber resilience and improve preparedness across both IT and operational environments. Read the September Cyber Threat Insights report - Link in comments:
-