ENISA publishes SME Cyber Resilience Maturity Assessment Model
Original title: Sme cyber resilience maturity assessment model
ENISA has published the SME Cyber Resilience Maturity Assessment Model, a structured framework designed to help micro, small and medium-sized enterprises (SMEs) evaluate and strengthen their overall cyber resilience while meeting the requirements of the Cyber Resilience Act (CRA). The model is primarily intended for organisations that manufacture and place products with digital elements on the market, as these are directly subject to CRA requirements. It can also be used by other organisations involved in the product life cycle, such as integrators or service providers, to assess and improve their product security practices. The model includes a practical tool (CRA Maturity Model v1.1 in Excel format) to facilitate implementation and self-assessment.
What changed
- ENISA has released a new SME Cyber Resilience Maturity Assessment Model designed to help organisations evaluate their cyber resilience against CRA requirements
- The model provides a structured approach for assessing and strengthening cyber resilience for manufacturers and placers of products with digital elements
- The CRA Maturity Model tool v1.1 is available as a downloadable Excel spreadsheet to support practical implementation and self-assessment
- The model is applicable not only to manufacturers but also to integrators and service providers involved in the product life cycle who wish to assess their product security practices
What the document requires
The model is intended for organisations that manufacture and place products with digital elements on the market, which are directly subject to CRA requirements, to evaluate and strengthen their cyber
Who is affected
Micro, small and medium-sized enterprises (SMEs) that manufacture and place products with digital elements on the market and are subject to CRA requirements; also applicable to integrators and service providers in the product life cycle in the EU
Summary generated by a language model; the official text prevails. Not legal advice.