Skip to content
CRA Banner
Nemko DigitalFeb 18, 2026 8:39:44 AM2 min read

Mastering the Cyber Resilience Act: Compliance, Governance, and Audit Readiness

Mastering the Cyber Resilience Act: Compliance, Governance, and Audit Readiness
4:21

The Cyber Resilience Act (CRA) is reshaping how organizations approach product security and compliance across digital elements in the digital world. But translating regulation text into tangible compliance deliverables can feel overwhelming—especially when you need to maintain development velocity.

That’s why we’re hosting a live webinar where industry experts from Nemko Group and Nemko Digital will share practical, field-tested insights on CRA compliance within the European Union’s evolving legal framework. If you’re responsible for product security, compliance, or development, this webinar is for you.

 

What You’ll Learn

Our webinar goes beyond the regulation text to focus on how CRA is being operationalized today as a landmark regulation (following a broader political agreement) within the existing EU legislative framework and existing cybersecurity legislative framework. You’ll discover:

  • CRA in Practice: Scope, timelines, boundary conditions, and how mandatory cybersecurity requirements translate into day-to-day obligations for device manufacturers that market products with digital content
  • Compliance Foundations: Governance structures, roles, processes, and documented controls expected under CRA, including essential cybersecurity requirements, common cybersecurity standards, and adequate security measures
  • Audit-Ready Evidence: Policies, risk assessments, technical files, and security documentation that stand up to review (including the CRA’s scope triggers—example references often start with Article 3 definitions and product categories)
  • Testing & Assessment Alignment: Vulnerability handling, security testing, and conformity assessments using Nemko Group’s testing expertise—covering cyber threats affecting connected information systems
  • Real-World Lessons: What works in current CRA readiness programs and what to avoid for many products, from household appliances to mobile applications and computer games, plus cloud-connected remote data processing solutions and other things

 

Why This Webinar Matters

Through ongoing engagements with leading manufacturers and digital product companies, we’ve learned that organizations approaching CRA compliance with a fragmented strategy face multiple challenges: duplicated effort, audit friction, and delayed product development—often impacting both consumers and internal teams.

By combining governance, compliance engineering, and testing in a single approach, organizations can avoid these pitfalls and move toward CRA compliance with confidence. This is especially relevant where CRA complements the larger cybersecurity framework that also includes the NIS Directive/NIS2 and interacts with the EU Cybersecurity Act (and, for some sectors, a possible future directive), as reflected in initiatives such as the European Commission Work Programme and any new plan supporting Europe’s digital future and trustworthy cybersecurity products.

 

Meet Your Speakers

 

 

Daniel Breive Havre brings deep technical expertise and practical business impact to cybersecurity strategy. As Service Delivery Manager and Senior Cyber Security Evaluator at Nemko, Daniel advises clients on strengthening product security, managing digital risk, and embedding security-by-design across IT and connected systems. With a background in electronic system design and signal processing from NTNU, he combines analytical rigor with pragmatic guidance—highlighting the essential role of repeatable engineering controls in compliance.

Pepijn van der Laan brings two decades of experience at the intersection of AI, strategy, and compliance. Previously Director of AI & Data at Deloitte, Pepijn has led groundbreaking work in AI tooling, model risk governance, and GenAI deployment. He advises multinational organizations on scaling trustworthy AI and navigating compliance obligations for emerging technologies.

 

Webinar Details

  • Date: Wednesday, March 5, 2026
  • Time: 3:00 PM CET
  • Duration: 30 minutes + Q&A
  • Format: Live Zoom Webinar

 

Register Now

Spots are filling up quickly.

We look forward to helping you navigate CRA compliance with confidence.

 

RELATED ARTICLES