CRA in Your Sprint – What Changes for Engineering?
The EU Cyber Resilience Act is often dismissed as a management-only compliance topic – in reality, most requirements land on engineering teams. In this workshop we show concretely what has to change in your daily sprint: SBOM generation in CI, vulnerability handling SLAs, threat modeling as part of stories. We build a first proof-of-concept pipeline step with you, so the jump from theory to practice becomes concrete.
Who is this for?
Engineering teams and tech leads at manufacturers of products with digital elements who must report from September 2026.
What you take away
- Which CRA requirements actually land on engineers
- SBOM, vulnerability handling, and threat modeling at sprint cadence
- Concrete tools and CI patterns that work today
- A roadmap for what to ship before September 2026
Who runs the workshop?
Request this workshop
CRA in Your Sprint – What Changes for Engineering?
Drop us a short note about your context — we'll get back within 48 hours with a concrete proposal.