CRA essentials: what being in scope actually demands
Knowing you're in scope is step zero. What in-scope asks of the product is where it gets concrete, and where most teams find the work they hadn't costed.
Topic
CRA
The four questions, replayed for this text alone.
Assess
CRA Topic page
Prepare
Go deeper
CRA governance: a file that has to survive being questioned
A checklist gives you a file. Whether that file survives a market-surveillance question, two years later, is a different discipline entirely.
Stay Ahead
CRA Topic page
Method notes that apply here
- Coordinated vulnerability disclosure as a capability Art 14 + Annex I, Part II