Skip to content

Cybersecurity and CRA audits

Cybersecurity
Cybersecurity and CRA audits

The EU Cyber Resilience Act (CRA) sets cybersecurity requirements for all products with digital elements – from smart devices to industrial machinery and software.

Since September 2026, actively exploited vulnerabilities found in products must be reported to the authorities, and from December 2027 all CRA obligations apply in full.

#AtoZfellows help you find out what the CRA means for your products and put the requirements into practice – without unnecessary overhead.

 
How a CRA audit works
  1. Pre-assessment and classification: we determine the product's CRA category and document its components and supply chains. Most products fall into the default category, where self-assessment is sufficient.
  2. Gap analysis: we compare the product's current state and development processes against the CRA requirements and identify what needs fixing.
  3. Corrective actions and documentation: we prepare the missing documents, such as the SBOM and risk assessments, along with the necessary technical improvements.
  4. Final report and CE conformity: we compile the technical documentation on which you can sign the EU declaration of conformity and affix the CE marking.

We can also help with parts of the work, for example mapping the current state, building the technical documentation, or setting up vulnerability handling and reporting practices. When your product belongs to the self-assessment category, we can carry out the entire audit.

Cybersecurity as part of quality assurance

Connected work machines and industrial devices bring new risks. We combine security with software testing and quality assurance, carry out security assessments for devices and web environments, and help you use AI securely. AtoZ is also a member of the Pirkanmaa security cluster.

Read more (in Finnish): CRA audit in a nutshell · Cybersecurity is a safety requirement for work machines

Does the CRA apply to your products? Ask the #AtoZteam – and get an estimate of the audit scope at the same time.

Call to sales!

Services

AIZilla-1

Digital service and product development from A to Z

We offer our expertise in a wide range of software development areas – including AI solutions. Our services cover everything from consulting to the design and implementation of complete information systems

Read more
ProjariZilla-1

Project Management

We ensure smooth delivery of software development projects from start to finish - from A to Z.

Read more
TestiZilla-1

Quality Assurance & Software Testing

"Quality must be seen – but also felt." Quality assurance is close to our hearts. We are committed to delivering high-quality solutions to our clients.

Read more

THEY ALSO TRUST OUR EXPERTISE

sandvik_logotype_black_rgb300
Mylab
Verkkokauppa.com
SataDiag
Epec
Novatron
AiCan
Heeros
Plugit
Technion
Digia
gofore
Go SportY

Has your interest been piqued?
Talk to sales 👉🏼

Call to sales!

One more step and we can help

Leave us a contact request, and we will get in touch with you as soon as possible.

You can also book a time slot for a free one-hour consultation where we will dive into the software challenges of your company.

Book a time slot

Current and Timeless AtoZ-news

Latest Blog posts

 

09/26
kulttuuri / teal / #AtoZtyypit / #AtoZdevlife

AtoZ Remains a Human-Sized Workplace with a Strong Sense of Community

At AtoZ, we know that people are the most important asset of any successful company. That is why we conduct an annual employee survey to better...

Read more
08/26
tiedotteet / liiketoiminta / #AtoZtyypit

AtoZ joins the Pirkanmaa Security Cluster

AtoZ has been accepted as a member of the Pirkanmaa Security Cluster. The cluster brings together companies, research and educational organisations,...

Read more
Blog