This course will give you a straightforward and comprehensive overview of the CRA and the legislative trends surrounding it. Beyond covering the basics mentioned above, we will also provide insights in the various mechanisms to demonstrate compliance, and discuss tradeoffs between legal certainty and the effort needed for compliance.

Additionally, we will discuss the broader industry trends that have led to the CRA’s creation, ensuring that you have a full-picture overview, and can make proactive rather than reactive decisions. Concretely, we will discuss the trends that have made products more vulnerable in general, the types of attackers you might encounter, and the various risks you should consider.

Finally, we will discuss industry best practices to develop secure products. These include the Secure Development Lifecycle, threat modeling, security testing, DevSecOps, and shift left security. We will discuss both the theory behind these practices, as well as how to effectively and efficiently use them in practice.  We will provide you with insights about the benefits and costs of these approaches, and help you judge the extent to which adopting these would benefit your organization.