Whitepapers
Cyber security
Cyber Risk Assessment for Beginners
From risk definition to a living TARA: a 7-part guide to systematic cyber risk assessment, with direct mappings to CRA, ISO/SAE 21434, and IEC 62443.
Download WhitepaperInsights from Cyber Resilience Act
The Cyber Resilience Act in practice: articles on requirements, deadlines and implementation of the EU regulation for secure products – from itemis security experts.
Format
Blog
Cyber resilience act
Living TARA: Why the Cyber Resilience Act Changes Your Engineering Process, Not Your Documentation
The CRA doesn't ask for a one-time risk analysis — it demands a permanently demonstrable security engineering process. How a Living TARA and the Security Digital Thread keep your risk picture continuously current and audit-ready.
Read Article
Dirk Leopold
6 min read
Blog
Cyber resilience act
CRA Risk Analysis in Excel: Start, Import, Scale
Excel template for CRA risk analysis: TARA in line with ISO 21434 and IEC 62443 — how to start methodically, what you can import, and when Excel becomes the bottleneck.
Read Article
Jens Bühl
6 min read
Blog
Cyber resilience act
CRA Reporting Obligations: Anatomy of a Notification, from Hour 0 to the Final Report
CRA Article 14 reporting obligations take effect on 11 September 2026. This article walks through the complete notification process chronologically — from the initial assessment to the final report — and identifies the points where reporting processes break down in practice.
Read Article
Dirk Leopold
12 min read
Blog
Cyber resilience act
The 7-Step Guide to the EU Cyber Resilience Act (CRA)
Will your product still be legally sellable in Europe after December 2027? This guide shows manufacturers how to approach CRA compliance in 7 structured steps and secure EU market access.
Read Article
Dirk Leopold
5 min read