Direct Insight will deliver a one-day, in-person classroom-based training course, ‘EU Cyber Resilience Act – Technical Training for Embedded & IoT: Planning for Compliance’, designed to equip embedded systems engineers, developers and project managers with the skills and knowledge to confidently prepare and plan for Cyber Resilience Act (CRA) compliance.
In less than three years’ time, all products shipped to the European Economic Area (EEA) will have to be CRA-compliant, as a legal pre-condition of bearing the CE mark. The EU Cyber Resilience Act came into force in December 2024, extending the CE marking scheme by mandating that, from December 2027, all products with digital elements that can be connected to a device or network must adhere to a strict set of rules in their design, documentation and support before claiming conformance.
Over the past 30 years, Direct Insight has trained thousands of engineers on a diverse range of topics in electronics and embedded systems design and development, including VHDL, FPGA design, and cyber security, reflecting the breadth of expertise of its staff. The company is currently rolling out training to assist its customers in adopting the provisions of the CRA (Cyber Resilience Act).
This one-day, intensive training course, developed by subject matter experts and delivered in-person by an experienced training team, will equip engineers and project managers with the skills to confidently prepare for CRA compliance in electronics and embedded systems design and development, based on a sound understanding of the requirements.
Practical and actionable information is provided based on various embedded development scenarios, covering both MCU- and MPU-based projects, and a range of typical software frameworks. At each stage, additional resources are identified that will allow further self-training and skills development, so that delegates can continue their journey to subject expert status.
“The CRA will have a significant impact on embedded developers – particularly those not familiar with CVEs (Common Vulnerabilities and Exposures) or SBOMs (software bill of materials), and unprepared to implement requirements like encryption, secure boot and OTA (over-the-air) updating,” said David Pashley, Co-Founder and Managing Director, Direct Insight. “All products shipped into the EU must comply by December 2027, so the time to start planning is now!”
Topics covered include:
- Scope and requirements of CRA
- Role of standards
- Risk assessment
- Secure software development lifecycle
- Authentication and secure boot
- Producing products ‘free from exploitable vulnerabilities’
- Maintaining and updating secure products
- Secure supply chain
- Conformity process and documentation
There’s plenty of other editorial on our sister site, Electronic Specifier! Or you can always join in the conversation by commenting below or visiting our LinkedIn page.
