Overview

A 4-module course on Regulation (EU) 2024/2847. The learner takes a Zero Day disclosure, applies secure-by-default obligations, runs upstream supplier diligence, and faces an ENISA review. Approximately 90 minutes total. Course delivered in English.

Target Audience:

Product security managers, CISOs, manufacturers, distributors, importers of products with digital elements covered by CRA Article 3.

Features and USPs:

The course helps learners to understand the scope and impact of the legislation and also to work through the regulation as it appears in the workplace. Learners experience the cause?and?effect of their decisions and are supported with immediate feedback. The course helps to build situational awareness, practical judgment, confidence and real?world problem?solving skills.

This interactive and adaptive online course is designed to turn a complex legislative topic into a memorable, actionable learning experience. Using a dynamic “choose your own adventure” format, the course adapts to the learner’s choices within a relatable workplace scenario.

Learning Objectives:

• Manage a vulnerability disclosure meeting Article 14 standards
• Apply Article 13 essential cybersecurity requirements during product design
• Run upstream supplier diligence on third-party components
• Coordinate Article 14(2) actively-exploited vulnerability notifications to ENISA
• Navigate market surveillance and ENISA scrutiny