Cyber Resilience Act 

Cyber Resilience Act

The European Union's Cyber Resilience Act (CRA) sets forth mandatory cybersecurity requirements for products with digital elements throughout their entire lifecycle.

To the extent that products, systems, or services fall within the scope of the CRA, the applicable legal requirements are implemented and taken into account in the development, operation, and maintenance processes.

The goal is to ensure an appropriate level of security that is in line with the state of the art and to reduce known and potential security risks.

Information Security

We implement appropriate technical and organizational measures in line with the state of the art to protect our systems, applications, and data against loss, destruction, tampering, unauthorized access, and unauthorized disclosure.

This is done in accordance with the applicable legal and regulatory requirements, including—where applicable—the requirements of the Cyber Resilience Act (CRA).

The security measures in place are regularly reviewed, evaluated, and adjusted as needed. 

Safety Measures

As part of our security plan, the following measures, in particular, are being implemented:

• Implementation of security requirements as early as the development phase (“Security by Design”)
• Integration of safety considerations into all relevant processes of the product life cycle
• Regular safety inspections, assessments, and risk evaluations
• Timely provision of security-related updates and fixes
• Processes for detecting, reporting, and resolving security incidents and vulnerabilities
• Continuous improvement of the protective measures in place in accordance with the state of the art

Reporting Security Incidents

Security vulnerabilities, security incidents, or other security-related issues must be reported immediately.

Please send your submissions to: cra@hades.eu