EU Cyber Resilience Act, Regulation (EU) 2024/2847
EU CRA requirements, mapped to your role.
The Cyber Resilience Act sets cybersecurity requirements for hardware and software sold in the EU. fullCircle deploys the EU CRA framework scoped to your role, maps it to the controls you already run and keeps the evidence behind your technical documentation current.
Controls
Frameworks
Deployed Frameworks (4)
Deploy Framework(s)ISO 27001:2022
116 Framework Controls
Controls Coverage:96%
Evidence Coverage:92%
SOC 2
61 Framework Controls
Controls Coverage:100%
Evidence Coverage:95%
PCI DSS v4.0.1
252 Framework Controls
Controls Coverage:89%
Evidence Coverage:84%
ISO 42001
66 Framework Controls
Controls Coverage:74%
Evidence Coverage:61%
The team behind fullCircle is trusted by security leaders at
About EU CRA
What is EU CRA?
The EU Cyber Resilience Act is the European Union regulation that sets mandatory cybersecurity requirements for products with digital elements across their lifecycle: secure design, vulnerability handling, security updates and incident reporting. Products that meet it carry the CE marking.
Who needs it
Manufacturers, importers and distributors of hardware and software sold in the EU, plus authorized representatives and open-source software stewards.
How fullCircle helps
EU CRA, without starting from scratch.
Scoped to your role
Deploy the EU CRA framework for your role: manufacturer, importer, distributor, authorized representative or open-source software steward.
Requirements mapped to the controls you run
Map CRA requirements onto your existing controls, so work done for ISO 27001 or SOC 2 counts toward the CRA too.
Technical documentation, kept current
Collect the evidence behind your technical documentation and EU declaration of conformity, and refresh it on a schedule.
Product security risk, tracked
Maintain a risk register for product security, linked to the controls and remediation tasks that address each risk.
Harmonize
EU CRA work that counts everywhere
Controls and evidence you maintain for EU CRA map to every other framework you run, so each requirement builds on work you've already done.
Test once · comply many
IAM-4
User Access Reviews
Expert services
Need help implementing? risk3sixty delivers EU CRA implementation projects, with fullCircle included.
FAQ
EU CRA FAQ
Still have questions? Talk to our team.
Get EU CRA-ready with fullCircle.
See how fullCircle maps EU CRA onto the controls and evidence you already have.