RESOURCES
Operational tools, not theory
Practical tools to move on the CRA, AI Act and NIS2 with something concrete in hand: a FAQ, a deadlines tracker and downloadable checklists.
STATE OF PLAY
State of Play — overview
The living-tracker section: where things stand on the AI Act and the Cyber Resilience Act, what has started and when it bites. With the monthly newsletter.
Open →STATE OF PLAY
State of Play — Cybersecurity
Where the CRA stands: deadlines with a countdown, harmonised standards, IEC 62443, the ENISA platform. Kept up to date.
Open →STATE OF PLAY
State of Play — AI
Where the AI Act stands: the dates that matter with a countdown, split between AI in your processes and AI in your product. Kept up to date.
Open →FAQ
Cyber Resilience Act FAQ
The questions that matter on scope, SBOM, reporting, penalties, and how the CRA fits with ISO 9001, NIS2 and IEC 62443.
Open →To download
I send the PDF by email; subscribing to the newsletter is optional.
DOWNLOAD
CRA Compliance Checklist
18 control points to see where you stand on the Cyber Resilience Act: SBOM, vulnerability management, technical file, deadlines. An operational PDF to tick off, not theory.
Download →DOWNLOAD
SRP Readiness Kit
CRA reporting has been live since 11 September 2026 and the early warning is due within 24 hours. Four sheets to fill in once: what to set up beforehand, the fields of each step, the escalation sheet and the report register.
Download →DOWNLOAD
Machinery Regulation Cybersecurity Checklist
From 20 January 2027 Regulation (EU) 2023/1230 brings cyber and AI requirements into CE marking. 16 points to see, model by model, what has to go into the technical file: EHSRs 1.1.9 and 1.2.1, EN 50742, AI, coordination with the CRA.
Download →