---
title: "The EU CRA as a Competitive Edge: Building Secure Embedded Products for the EU Market and Beyond"
description: "In this meetup, ICS, Toradex, and BG Networks, take a practical, engineer-to-engineer look at what the CRA asks of device makers and how to meet it without building a security organization from scratch. The session follows the product lifecycle:\n\nDevelop: Building security in from the start: choosing the right SoM, threat modeling and risk assessment of the essential requirements, secure boot and chain of trust, encryption, trusted execution, and secure application and GUI development.\n\nDeploy: Documenting and proving what's in your product. That means SBOMs for both the operating system and the application layers, audit-ready technical documentation, and the conformity-assessment work that leads to CE marking.\n\nMaintain: Handling vulnerabilities across a support period of at least five years."
image: https://resources.ics.com/hubfs/600x255-torizon-toradex-logos.png
---

[![ICS](https://resources.ics.com/hs-fs/hubfs/logo-ics.png?width=100&height=50&name=logo-ics.png "ICS")](https://resources.ics.com?hsLang=en)

[Visit Our Site ›››](https://www.ics.com)

EU Cyber Resilience Act Meetup

# The EU CRA as a Competitive Edge: Building Secure Embedded Products for the EU Market and Beyond

November 18 | Waltham, MA | 4 - 7 pm

The EU Cyber Resilience Act (CRA) is no longer a future concern. Since September 11, 2026, manufacturers have had to report actively exploited vulnerabilities and severe incidents within 24 hours.

By December 11, 2027, every connected product sold in the EU must meet the full set of requirements. Development cycles often run 18 months or more, so many of today's roadmaps will miss that deadline. A product that falls short risks its CE marking, its access to the EU market, and fines of up to €15 million or 2.5% of global turnover, whichever amount is larger.

In this meetup, you will be able to interact with the teams at ICS, Toradex, and BG Networks, as well as other industry attendees. We will have a practical, engineer-to-engineer discussion about what the CRA asks of device makers and how to budget, plan, and implement a program to meet it without building a security organization from scratch. The session follows the product lifecycle:

- Categorize: How to determine which products are in scope for the EU CRA, which it does not apply to, and what CRA category it falls into.
- Develop: Building security in from the start, including choosing the right SoM, performing a threat modeling and risk assessment and implementing state of the art security features such as secure boot with a chain of trust, encryption, trusted execution, and secure application and GUI development.
- Deploy: Documenting and proving what's in your product. That means SBOMs with vulnerability analysis, audit-ready technical documentation, and declaring conformity for a CE marking.
- Maintain: Handling vulnerabilities for a support period of at least five years.

You'll have time to have your specific questions answered directly by the experts over networking and drinks. The event is free, but registration is required!

![650x255-torizon-toradex-logos](https://resources.ics.com/hs-fs/hubfs/650x255-torizon-toradex-logos.png?width=650&height=255&name=650x255-torizon-toradex-logos.png "650x255-torizon-toradex-logos")

[Contact Us](https://www.ics.com/company/contact) | [Privacy Policy](https://www.ics.com/privacy-policy) | [Cookie Policy](https://www.ics.com/cookie-policy) | [Terms of Service](https://www.ics.com/tos) | [Site Map](https://www.ics.com/site-map) | [Trademarks](https://www.ics.com/trademarks)

Copyright © 1999-2026. Integrated Computer Solutions.

[![BostonAI\_Logo\_white-mono](https://resources.ics.com/hs-fs/hubfs/BostonAI_Logo_white-mono.png?width=175&height=56&name=BostonAI_Logo_white-mono.png "BostonAI_Logo_white-mono")](https://boston.ai)

[![BostonUX](https://resources.ics.com/hubfs/BostonUX_Logo_KO.svg "BostonUX")](https://bostonux.com)