Cyber Resilience Act

Assess your compliance with the EU Cyber Resilience Act (CRA).

Presentation

The Cyber Resilience Act is a European regulation applicable to products with digital elements placed on the market in the EU. It establishes mandatory cybersecurity requirements throughout the product lifecycle.

What does the regulation require?

• Secure by design: security embedded from design to end of life
• Vulnerability management: coordinated disclosure and timely patches
• Documentation: declaration of conformity, technical documentation
• Supply chain: SBOM, open source compliance, supplier evaluation
• Reporting: notification of incidents to ENISA and authorities

Who is affected?

Manufacturers and distributors of products with digital elements (software, hardware, IoT) placed on the EU market.

Cyber Resilience Act : auto-évaluation

Évaluez votre conformité au Cyber Resilience Act (UE) — règlement applicable aux produits avec éléments numériques.

Classification et dimensionnement du produit Développement sécurisé (Secure by Design) Gestion des vulnérabilités et mises à jour Gestion des incidents et coordination Documentation et conformité Chaîne d'approvisionnement et open source

Previous Next

Self-assessment report

Your organisation's IT security maturity

Free online diagnostic run with G-Echo

Overall maturity level –

Issued on :

Did this report help you see things more clearly? Let's talk: a free call with a G-Echo expert

G-Echo — https://g-echo.fr/

Result

–

Overall maturity level

domains answered

Help / Why this question?

Annex A — Prioritized action plan

This plan prioritizes measures per domain according to the observed maturity level (P1: low maturity, P2: average, P3: good). Efforts are expressed in man-days, for guidance only.

These efforts and budgets are indicative (standard ranges) and neither a quote nor a formal risk analysis.

Reset everything Download PDF report

Partners

Sovereign & secure cloud: Akilao by SWiiptel

Migrate your infrastructure to SWiiptel's (SWIIPTEL SAS) 100% French cloud platform — 24/7 monitoring, Toulouse ↔ Paris datacenters. Four migration plans accompany the move, with no application rework:

1Identical migration

VM backed up nightly, full elasticity, no application changes.

2Shared security

High-availability shared firewall, dedicated internal IP zone, supervised perimeter.

3Dedicated security

Dedicated firewall + dedicated WAN IP, internal IP zone, VLAN of your choice.

4High availability

2 dedicated firewalls in failover, 3 external IPs including 1 kept (CARP), multi-datacenter Toulouse ↔ Paris.

Shared secure foundation: nginx reverse proxy in front, dedicated VPN, managed certificates and ticket-based support.

Discover Akilao offers

G-Echo

Contact G-Echo

Cybersecurity audit, consulting and expertise (EBIOS Risk Manager, ISO 27001).

Address6 Avenue de la Gare, C24, 31380 Garidech, France

Phone+33.9.856.002.40

Emailcontact@g-echo.fr

Websiteg-echo.fr

Monday to Friday, 9am-6pm

Talk to an expert

G-Echo — https://g-echo.fr/

Contact us for CRA compliance