Skip to content
EU CRARegulation (EU) 2024/2847

The Cyber Resilience Act is a cornerstone of the EU cybersecurity strategy, bridging the gap between organizational obligations and concrete product security across the digital single market.

EU Regulatory Suite
NIS2StepsNIS 2 Directive (EU 2022/2555)CRAStepsCyber Resilience Act (EU 2024/2847)AIActStepsEU AI Act (EU 2024/1689)SKOPION IntelligenceTechnical Advisory & Audit
What is the Cyber Resilience Act?How it worksWhat you getMethodologyFAQAdvisory & AuditStart assessmentLegalPrivacyTerms of Service

CRASteps is the tool used across SKOPION Intelligence services. To the service

CRASteps is an independent product, not an authority or certification body.

No certificate, no legally binding confirmation of full CRA compliance. The result is based exclusively on your own inputs.

All rights reserved. Subject to change without notice.

EU Regulatory Suite:
NIS2StepsCRAStepsAIActSteps
SKOPION Advisory & Engineering
CRAStepsTool of SKOPION Intelligence Services
What is the Cyber Resilience Act?How it worksWhat you getMethodologyFAQStart Screening
  6. Result & Consultation

CRA Assessment

Question 1 of 8

In which country is your organization based or is the product placed on the EU market?

The CRA applies directly across the EU. Selection determines the market surveillance authority and CSIRT reporting channels.

Why we ask this

Identifies the market surveillance authority and designated CSIRT coordinator on the Single Reporting Platform (SRP ENISA) under Art. 14 CRA.

Legal basis: Regulation (EU) 2024/2847 Art. 2, Art. 14 & Art. 52–54 (market surveillance)

National authority & CSIRT: Bundesnetzagentur (BNetzA) & BSI — Marktüberwachungsbehörden für Produkte mit digitalen Elementen · CERT-Bund (BSI) — Ausgewiesener CSIRT-Koordinator der Single Reporting Platform (SRP ENISA, Art. 14 CRA)

Timeline: Meldepflichten gelten ab 11.09.2026, volle CE-Kennzeichnungspflicht ab 11.12.2027.