EN | IT | DE

Cart

Close

No products in the shopping cart.

Cyber Resilience Act: DAVE's Approach to Cyber Security Reporting

With the entry into force of the Cyber Resilience Act (CRA) reporting obligations on September 11, 2026, manufacturers of connected products are required to adopt structured processes for handling and reporting cybersecurity vulnerabilities and incidents. The new regulation represents an important step toward improving the security and resilience of digital products throughout their lifecycle. 

To support customers and partners in meeting these requirements, DAVE Embedded Systems has implemented a dedicated Cyber Security Reporting process designed to manage vulnerability disclosures efficiently and transparently. The objective is to ensure that security issues are identified, assessed, and handled according to the timelines and obligations defined by the CRA. 

An effective reporting framework is becoming a key element of product cybersecurity. It allows security researchers, customers, and stakeholders to communicate potential vulnerabilities through a defined channel, enabling timely analysis and coordinated response activities. By establishing clear reporting procedures, organizations can reduce response times, improve risk management, and strengthen trust in connected devices.

The CRA introduces a new level of accountability for manufacturers operating in the European market. Beyond technical product security, companies must demonstrate the capability to monitor, report, and address cybersecurity incidents in a structured manner.

Through its Cyber Security Reporting initiative, DAVE reinforces its commitment to secure embedded systems and regulatory compliance, helping customers navigate the evolving cybersecurity landscape while maintaining focus on innovation and product development