CRA training for connected product teams

Learn how the CRA works in practice, from scope to CE marking. Your team will determine whether the regulation applies, classify products, understand risk assessment and Annex I obligations, navigate conformity routes, and identify the responsibilities of manufacturers, importers, distributors and authorised representatives – including the often-overlooked deemed-manufacturer rule.

Get ready for Article 14 reporting. Your team will learn the 24-hour reporting requirements, the three-stage timeline, notification obligations, and the processes needed to comply – including for legacy products already on the EU market.

Your team will learn how to establish and operate an end-to-end vulnerability management process, from preparation and vulnerability intake through verification, remediation, release and post-release activities. Learn how to maintain a software bill of materials (SBOM), implement coordinated vulnerability disclosure, deliver secure and timely security updates, and carry out regular security testing to meet the ongoing obligations of CRA Annex I, Part II.

Define your product under the CRA and determine how it must be assessed. Your team will learn how to draw the legal boundary around a product with digital elements, including where remote data processing, components, open source and updates come into scope. They’ll then learn to apply the official technical descriptions adopted in November 2025 to classify your product and determine which conformity assessment route applies.