Rewatch our webinar
Up to speed with the Cyber Resilience Act (CRA) within one hour
. 
Imagine this…
On a Friday evening, your organisation receives an email from a researcher who has discovered a vulnerability in your product. Every sign points to it already being actively exploited. Under the Cyber Resilience Act (CRA), the clock starts ticking from that moment: an initial notification to ENISA within 24 hours, a full notification within 72 hours, followed by a final report.
Who reads that email? Who decides whether the exploitation is real? Who knows which product versions and which customers are affected? These are not legal questions but organisational ones. Many organisations will be able to answer them on paper, but does it work in practice?
Cingulum helps you sharpen that governance side: who falls within scope, where responsibilities sit internally, and how to organise this in a demonstrable way.
During this webinar, Cingulum, CRANIUM and Refracted Security give you a complete picture of the entire process: from the first report of the vulnerability to a compliant notification to the authority. CRANIUM covers the legal side, Refracted Security the technical side and Cingulum the governance side.
Gain access to the webinar
Meet the webinar's hosts
Stijn Muylle
Expert Consultant at Cingulum
Stijn's interest in cybersecurity started early: as a child he spent so much time at the computer that his father had to lock the room. He began his career on the technical side, as a pentester and in development, and grew from there into broader security questions. Today he helps companies embed security not only technically but organisationally as well.
Siebe De Roovere
Cybersecurity Advisor at Refracted
Siebe De Roovere is Security Advisor and CISO at Refracted Security, where he helps manufacturers turn CRA obligations into working product security. He is certified in the EU Cyber Resilience Act and OWASP SAMM, and has been a guest lecturer in cybersecurity strategy at Ghent University and KU Leuven for over eight years.
Bernd Fiten
Head of Digital Law at CRANIUM
Bernd Fiten is Head of Digital Law at CRANIUM. He guides organisations through the legal and contractual impact of new regulations such as the Cyber Resilience Act, with a strong focus on practical applicability within existing processes and contracts. Bernd helps companies across the entire chain, from suppliers to customers, to operate compliantly and stay future-proof.
What do you take away from this webinar?
- Who falls within scope under the CRA and what roles that entails within your organisation
- How to organise responsibilities and processes internally so that you meet the 24-hour and 72-hour deadlines
- Why a policy document is not enough, and what a regulator will actually accept as evidence
- How governance, PSIRT and legal liability interact during a real incident
- Five questions to test, straight after the session, whether your organisation is governance-ready
And much more.
Who is this webinar for?
Anyone responsible for the internal organisation of security governance at manufacturers, importers and distributors of products with digital elements.
Relevant for CISOs and security managers, GRC and risk managers, compliance officers, and anyone who has to define or monitor role allocation and escalation paths within the organisation.
Blog post
More questions on the CRA?
From the build phase to the support phase: we set out what the CRA means in practice for your digital products and how you demonstrate compliance.
