CRA quick check
About this app
Answer 18 Cyber Resilience Act questions with yes, partly, no or open: a maturity ring shows product and role, reporting check and evidence, the live evaluation rates the state (structured, building up, starting point), caps it when core structures are missing and names the top 3 gaps and next steps. Product class separately; copy or print the result.
With explain mode: an AI tutor walks you through the app, points out what matters in the scene and answers your questions.
Organisationally ready for the Cyber Resilience Act?
The Cyber Resilience Act, Regulation (EU) 2024/2847, places obligations on manufacturers of products with digital elements. Since 11 September 2026 the reporting obligations of Art. 14 apply: early warning within 24 hours, notification within 72 hours of becoming aware of an actively exploited vulnerability or a severe incident, including for products already sold. From 11 December 2027 essential requirements, technical documentation, conformity assessment and CE marking follow. What matters is whether product responsibility, reporting channels and evidence are organised.
What the app shows
A ring of 18 segments, one per question, in three parts: product and role, vulnerability handling with internal reporting check, and evidence, measures and management status. Filled segments stand for structures in place, sand areas for gaps, hatched ones for open questions. Diamonds mark five core structures. The live evaluation rates the state as structured, building up or starting point and shows the three largest gaps and the next three work steps. Part B classifies the product separately.
Try it yourself
Answer the questions for your product or load one of the two examples. The well prepared manufacturer answers 13 of 18 questions with yes, yet lands in building up: the management status is open, and a missing core structure caps the rating. Set it to yes and the state becomes structured. The result can be copied or printed as the basis for an internal kick-off meeting.
Frequently asked questions
- When do the Cyber Resilience Act reporting obligations apply?
- The reporting obligations under Art. 14 have applied since 11 September 2026, including for products placed on the market earlier: early warning within 24 hours, notification within 72 hours of awareness. The main obligations with conformity assessment and CE marking apply from 11 December 2027.
- What does the product class mean under the CRA?
- Default products prepare essential requirements and evidence. For important products of class I under Annex III, internal control is only possible if permitted standards are fully applied; class II requires independent third-party assessment as a rule; for critical products under Annex IV, certification under Art. 8 must be checked.
- Does a CRA quick check replace conformity assessment?
- No. A quick check shows the organisational state of preparation. It does not replace legal advice, technical product testing, conformity assessment or certification, or a final assessment of reporting obligations.
- What can I try in the app?
- Answer 18 questions, expand notes for each question, load two example profiles, classify the product, follow the rating, top 3 gaps and next steps live, and copy or print the result.
Subject: Betriebliche Weiterbildung
More from Betriebliche Weiterbildung
- CRA reporting deadlines: the reporting clock
- Cyber Resilience Act: applicability check
- SBOM for a gate operator (3D)
A VisuApp by heyprof: interactive, free in your browser, no sign-up. What is a VisuApp? · All apps