---
title: "The EU Cyber Resilience Act: It’s Not Just Europe’s Problem"
description: "In this meetup, ICS, Toradex, and BG Networks, take a practical, engineer-to-engineer look at what the CRA asks of device makers and how to meet it without building a security organization from scratch. The session follows the product lifecycle:\n\nDevelop: Building security in from the start: choosing the right SoM, threat modeling and risk assessment of the essential requirements, secure boot and chain of trust, encryption, trusted execution, and secure application and GUI development.\n\nDeploy: Documenting and proving what's in your product. That means SBOMs for both the operating system and the application layers, audit-ready technical documentation, and the conformity-assessment work that leads to CE marking.\n\nMaintain: Handling vulnerabilities across a support period of at least five years."
---

[![ICS](https://resources.ics.com/hs-fs/hubfs/logo-ics.png?width=100&height=50&name=logo-ics.png "ICS")](https://resources.ics.com?hsLang=en)

[Visit Our Site ›››](https://www.ics.com)

EU Cyber Resilience Act Meetup

# The EU Cyber Resilience Act: It’s Not Just Europe’s Problem

November 18 | Waltham, MA | 4 - 7 pm

The EU Cyber Resilience Act (CRA) is no longer a future concern. Since September 11, 2026, manufacturers have had to report actively exploited vulnerabilities and severe incidents within 24 hours.

By December 11, 2027, every connected product sold in the EU must meet the full set of requirements, including products already on the market. Development cycles often run 18 months or more, so most of today's roadmaps will hit that deadline. A product that falls short risks its CE marking, its access to the EU market, and fines of up to €15 million or 2.5% of global turnover.

In this meetup, ICS, Toradex, and BG Networks, take a practical, engineer-to-engineer look at what the CRA asks of device makers and how to meet it without building a security organization from scratch. The session follows the product lifecycle:

- Develop: Building security in from the start: choosing the right SoM, threat modeling and risk assessment of the essential requirements, secure boot and chain of trust, encryption, trusted execution, and secure application and GUI development.
- Deploy: Documenting and proving what's in your product. That means SBOMs for both the operating system and the application layers, audit-ready technical documentation, and the conformity-assessment work that leads to CE marking.
- Maintain: Handling vulnerabilities across a support period of at least five years.

You'll have time to have your specific questions answered directly by the experts over networking and drinks. The event is free, but registration is required!

![650x255-torizon-toradex-logos](https://resources.ics.com/hs-fs/hubfs/650x255-torizon-toradex-logos.png?width=650&height=255&name=650x255-torizon-toradex-logos.png "650x255-torizon-toradex-logos")

[Contact Us](https://www.ics.com/company/contact) | [Privacy Policy](https://www.ics.com/privacy-policy) | [Cookie Policy](https://www.ics.com/cookie-policy) | [Terms of Service](https://www.ics.com/tos) | [Site Map](https://www.ics.com/site-map) | [Trademarks](https://www.ics.com/trademarks)

Copyright © 1999-2026. Integrated Computer Solutions.

[![BostonAI\_Logo\_white-mono](https://resources.ics.com/hs-fs/hubfs/BostonAI_Logo_white-mono.png?width=175&height=56&name=BostonAI_Logo_white-mono.png "BostonAI_Logo_white-mono")](https://boston.ai)

[![BostonUX](https://resources.ics.com/hubfs/BostonUX_Logo_KO.svg "BostonUX")](https://bostonux.com)