CONFERENCE: BUILDING CRA COMPLIANCE
THROUGH HORIZONTAL CYBERSECURITY STANDARDS

Shaping Compliance through European Standards

21 SEPTEMBER 2026

09:00 – 16:15  |  Hilton Cyprus, Nicosia

The event will be held in a hybrid format.

Register

Organized by the Cyprus Organization for Standardization (CYS) with the support of the Digital Security Authority (DSA), this high-level conference brings together policymakers, regulators, cybersecurity experts, industry representatives, manufacturers, and Standardization stakeholders to explore how European standardization is supporting the implementation of the Cyber Resilience Act (CRA).

The CRA is one of the European Union’s most important cybersecurity initiatives, designed to strengthen cybersecurity across the EU Single Market by ensuring that products with digital elements remain secure throughout their lifecycle.

To support its implementation, the European Commission has mandated the development of a series of harmonized European standards that will provide organizations with practical pathways for demonstrating compliance with CRA requirements.

This conference focuses on the horizontal cybersecurity standards currently being developed within CEN and CENELEC, covering common cybersecurity principles, product risk management, vulnerability handling, lifecycle activities, and generic security requirements for products with digital elements.

Through presentations from leading European experts, industry case studies, and interactive discussions, participants will gain valuable insights into the latest standardization developments, hear directly from the experts shaping the standards, and explore the challenges and opportunities associated with CRA compliance across Europe.

Key Areas of Focus

This conference provides an overview of the standardization activities supporting implementation of the Cyber Resilience Act (CRA), with a focus on the horizontal standards that define the Essential Security Requirements for products with digital elements. These cover areas such as access management, secure software design, encryption, vulnerability handling, and incident response. Alongside the standards themselves, the conference brings together policy, industry, and regulatory perspectives — including the CRA standardization roadmap, manufacturer case studies, and panel discussions with both industry stakeholders and national authorities — to show how these requirements support cybersecurity across the product lifecycle and enable regulatory compliance.

Who Should Attend?

Whether you are preparing your organization for Cyber Resilience Act (CRA) compliance, developing secure digital products, shaping cybersecurity policy, or contributing to European standardization, this conference offers valuable insights, practical guidance, and direct access to the experts driving the future CRA standards.

Manufacturers, importers, and distributors of products with digital elements
Cybersecurity professionals, CISOs, and information security managers
Software developers, product designers, and engineering teams
Compliance, governance, risk, and legal professionals
Conformity assessment, testing, certification, and accreditation bodies
Public authorities, regulators, and market surveillance authorities
Standardization experts, researchers, academics, and consultants
SMEs, technology startups, and industry associations

Why Attend?

Gain a first-hand understanding of the emerging standards that will underpin CRA compliance, engage directly with European and national experts, exchange experiences with industry peers, and help shape the future cybersecurity landscape across Europe.

About STAN4CR

The development of harmonised European standards is essential for the successful implementation of the Cyber Resilience Act (CRA). The STAN4CR project, funded by EISMEA, supports the development of the cybersecurity standards required for CRA compliance, with the goal of delivering the standards within targeted timeframes.

Beyond its technical objectives, STAN4CR promotes stakeholder engagement, awareness raising, and participation in European standardization, bringing together industry, SMEs, academia, open-source communities, regulators, and cybersecurity experts to strengthen cyber resilience across the EU Single Market.

This conference is organized within the framework of the STAN4CR initiative and contributes to its mission of fostering knowledge exchange and supporting the implementation of the CRA through harmonised European standards.

More information:

STAN4CR Project Website

CRA Resources and Publications

21 SEPTEMBER 2026  |  09:00 – 16:15

Hilton Cyprus, Nicosia

Register

The information presented at this event is provided within the framework of the STAN4CR project. The project is financed by the European Union (EU) and the European Free Trade Association (EFTA) and is implemented by the European Standardization Organizations (ESOs).

CONFERENCE: BUILDING CRA
COMPLIANCE THROUGH HORIZONTAL
CYBERSECURITY STANDARDS

Shaping Compliance through
European Standards

21 SEPTEMBER 2026

09:00 – 16:15  |  Hilton Cyprus, Nicosia
The event will be held in a hybrid format.

Register

Organized by the Cyprus Organization for Standardization (CYS) with the support of the Digital Security Authority (DSA), this high-level conference brings together policymakers, regulators, cybersecurity experts, industry representatives, manufacturers, and Standardization stakeholders to explore how European standardization is supporting the implementation of the Cyber Resilience Act (CRA).

The CRA is one of the European Union’s most important cybersecurity initiatives, designed to strengthen cybersecurity across the EU Single Market by ensuring that products with digital elements remain secure throughout their lifecycle.

To support its implementation, the European Commission has mandated the development of a series of harmonized European standards that will provide organizations with practical pathways for demonstrating compliance with CRA requirements.

This conference focuses on the horizontal cybersecurity standards currently being developed within CEN and CENELEC, covering common cybersecurity principles, product risk management, vulnerability handling, lifecycle activities, and generic security requirements for products with digital elements.

Through presentations from leading European experts, industry case studies, and interactive discussions, participants will gain valuable insights into the latest standardization developments, hear directly from the experts shaping the standards, and explore the challenges and opportunities associated with CRA compliance across Europe.

Key Areas of Focus

This conference provides an overview of the standardization activities supporting implementation of the Cyber Resilience Act (CRA), with a focus on the horizontal standards that define the Essential Security Requirements for products with digital elements. These cover areas such as access management, secure software design, encryption, vulnerability handling, and incident response. Alongside the standards themselves, the conference brings together policy, industry, and regulatory perspectives — including the CRA standardization roadmap, manufacturer case studies, and panel discussions with both industry stakeholders and national authorities — to show how these requirements support cybersecurity across the product lifecycle and enable regulatory compliance.

Who Should Attend?

Whether you are preparing your organization for Cyber Resilience Act (CRA) compliance, developing secure digital products, shaping cybersecurity policy, or contributing to European standardization, this conference offers valuable insights, practical guidance, and direct access to the experts driving the future CRA standards.

 Manufacturers, importers, and distributors of products with digital elements
 Cybersecurity professionals, CISOs, and information security managers
 Software developers, product designers, and engineering teams
 Compliance, governance, risk, and legal professionals
 Conformity assessment, testing, certification, and accreditation bodies
 Public authorities, regulators, and market surveillance authorities
 Standardization experts, researchers, academics, and consultants
 SMEs, technology startups, and industry associations

Why Attend?

Gain a first-hand understanding of the emerging standards that will underpin CRA compliance, engage directly with European and national experts, exchange experiences with industry peers, and help shape the future cybersecurity landscape across Europe.

About STAN4CR

The development of harmonised European standards is essential for the successful implementation of the Cyber Resilience Act (CRA). The STAN4CR project, funded by EISMEA, supports the development of the cybersecurity standards required for CRA compliance, with the goal of delivering the standards within targeted timeframes.

Beyond its technical objectives, STAN4CR promotes stakeholder engagement, awareness raising, and participation in European standardization, bringing together industry, SMEs, academia, open-source communities, regulators, and cybersecurity experts to strengthen cyber resilience across the EU Single Market.

This conference is organized within the framework of the STAN4CR initiative and contributes to its mission of fostering knowledge exchange and supporting the implementation of the CRA through harmonised European standards.

More information:

STAN4CR Project Website

CRA Resources and Publications

21 SEPTEMBER 2026

09:00 – 16:15  |  Hilton Cyprus, Nicosia

Register

The information presented at this event is provided within the framework of the STAN4CR project. The project is financed by the European Union (EU) and the European Free Trade Association (EFTA) and is implemented by the European Standardization Organizations (ESOs).