IoT devices put on the market after November 2024 have to comply with the CRA!
安全松懈的时代已经一去不复返了 - 现在是以安全为设计的开发准则。 事后修补漏洞的方式已不再通行 - 主动防范威胁、漏洞评估和安全更新成为常态。但是,由于资源有限和根深蒂固的开发模式,要适应这种范式转变将不是一件容易的事。
欧洲法规的覆盖范围超出了最初的合规要求,要求 在设备的整个生命周期中进行持续监控。新发现的软件漏洞可能会将您曾经合规的设备或软件变成潜在威胁。但确保这种持续的网络安全状态是令人望而生畏的。资源有限,隐藏的缺陷可能会藏在阴影中。
Internal resources, already stretched thin, may buckle under the burden of revamped processes, specialized expertise, and ongoing monitoring infrastructure. The CRA is a feat made for security giants, not smaller innovator. Collaboration, innovative solutions, and regulatory support from i46 will be crucial to ensure CRA compliance does not become a luxury.
The Cyber Resilience Act (CRA) in the European Union has raised the bar for IoT device security. i46 is here to help manufacturers and distributors navigate this new regulatory landscape.
For them, we offer comprehensive services, including initial and full assessments to identify security gaps, certification guidance to ensure compliance, and ongoing monitoring to maintain device security.
For non-EU companies, we also provide EU representation services.
Our state-of-the-art laboratory, equipped with a private 5G network, allows us to test even the most unconventional IoT devices, including those without operating systems, ensuring compliance for a wide range of devices.
By partnering with i46, IoT manufacturers can not only meet the requirements of the CRA but also enhance the security of their IoT devices, benefiting both their business and their customers.
千里之行,始于足下。
With us, your path to CRA compliance starts with a swift and thorough Initial Assessment. This first phase, lasting just one working day, is entirely free of charge and designed to quickly determine if your product aligns with our certification capabilities.
In Phase 2, we uncover the exact changes your product needs to undergo in order to become CRA compliant. Our experts conduct a comprehensive assessment, leaving no stone unturned to ensure your product aligns with the stringent requirements of these European regulations.
目标近在咫尺。
Phase 3, Certification, seals the deal, ensuring your IoT devices are not only secure but recognized as such.
During this phase we ensure that the issues identified in Phase 2 have been addressed, draft the EU Declaration of Conformity, which enables you to affix the CE marking to your product, and establish the 欧盟授权代表合同,满足非欧盟公司在欧盟设立代表的要求。.
第四阶段,i46专注于持续监控,确保您的设备在整个生命周期内始终符合《网络弹性法案》的要求。在这个阶段,我们将对您的产品进行年度审查,并在必要时行使我们作为欧盟授权代表的维护职责。
↙
Includes EU Authorised Representative and CE Marking !
千里之行,始于足下。对于我们的客户 - 您来说,朝着合规性迈出的第一步是非常 迅速、彻底,并且完全免费。初始评估是对您产品的安全状况进行一天的深入了解,旨在为您的前进之路提供明确的指引。
Our dedicated experts will scrutinize your documentation, architecture, and development processes. Within a day, you will receive a clear roadmap for achieving a robust, CRA-compliant future.
• 产品通用描述
• 认证批准: 我们将在1个工作日内确认您的产品是否符合i46认证的资格。
The Full Assessment is a meticulous and comprehensive evaluation of your product or software, designed to provide you with a clear roadmap for achieving compliance.
Our experts will delve into every aspect of your product: architecture, security posture, development processes, data handling, and potential vulnerabilities. No detail is overlooked as we analyze your product against the stringent CRA standards.
The result is a personalized action plan, outlining the precise adjustments needed to ensure your product meets all compliance criteria.
• Design documents (if available),
• A detailed list of changes required for certification, pinpointing areas for improvement and ensuring compliance with the CRA's robust security standards.
Building on the roadmap built in the previous phase, this phase takes your product on a transformative journey towards CRA compliance.
We focus on two key objectives: ensuring that all identified vulnerabilities identified earlier have been fixed and generating comprehensive compliance documentation.
This phase is more than just technical wizardry; it is the guarantee of CRA compliance At the end of this phase, we hand you the keys to compliance, empowering you to navigate the CRA landscape with confidence and ease.
• All issues uncovered during the assessment have been meticulously addressed,
• Certification documents that attest to your device's compliance: EU Certificate of Conformity, Technical Documentation and CE marking,
Non-EU companies looking to sell their connected devices and software in the European market face a hurdle: the Cyber Resilience Act demands a designated EU Authorised Representative.
This trusted legal entity acts as your bridge to the EU, ensuring your products comply with the Act's reporting requirements and assessment requirements.
But what exactly does it mean to have an Authorised Representative ? Think of it as a business and technical partner. From handling technical documentation and conformity assessments to dealing with authorities and responding to incidents, your representative becomes your voice in the EU.
This is where i46 revolutionizes the game. Unlike other providers who charge hefty fees for this essential service, i46 includes EU Authorized Representation as part of its basic package. This means unparalleled accessibility and affordability – a game-changer for smaller companies and startups who might otherwise be priced out of the European market.
With i46 as your EU Authorized Representative, you gain an experienced partner, not just a compliance checkbox
Achieving CRA compliance is a crucial first step, but ensuring your product remains compliant is a marathon, not a sprint.
In this phase, Continuous Monitoring, is where i46.io becomes your unwavering guardian, safeguarding your CE certification and, hence, CRA compliance throughout your product's lifecycle.
• i46.io Server as Your Compliance Guardian: All CRA-compliant devices leverage the i46.io server for continuous monitoring, ensuring timely detection and response to potential threats,
• Automatic Notifications, Keeping Everyone Informed : In case of a security issue, we automatically notify both end users and relevant authorities, aligning with legal requirements and fostering transparency,
↙
╰┈➤