Pré-Publication, Document De Travail Année : 2025

Towards an architecture for managing security under the EU Cyber Resilience Act

Résumé

The European Union's Cyber Resilience Act (CRA) establishes a comprehensive regulatory framework designed to enhance the cybersecurity of digital products throughout their entire lifecycle. This paper presents a systematic analysis of the technical and organizational requirements imposed by the CRA, offering a structured overview of its provisions and requirements. From this analysis, we derive an architecture that supports a compliance-by-design approach, enabling the CRA obligations to be met from the early stages of product development. This work fills a gap in the literature by providing a generalizable technical perspective on CRA compliance, supporting developers and manufacturers with a clear list of security requirements and a set of architectural guidelines.

Fichier principal
Vignette du fichier
Towards_an_architecture_for_managing_security_under_the_EU_Cyber_Resilience_Act.pdf (204.01 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-05139698 , version 1 (02-07-2025)

Licence

Identifiants

  • HAL Id : hal-05139698 , version 1

Citer

Daniele Canavese, Afonso Ferreira, Romain Laborde, Mohamed Ali Kandi. Towards an architecture for managing security under the EU Cyber Resilience Act. 2025. ⟨hal-05139698⟩
1096 Consultations
365 Téléchargements

Partager

  • More