A Question Every Firmware Team Will Eventually Face Firmware rarely gets updated for just one reason. A single Maintenance Release (MR) often bundles bug fixes, new features, and vulnerability fixes together. But the EU Cyber Resilience Act (CRA) adds a twist: where technically feasible, security updates should be provided separately from feature updates. This raises…
Looking at Trustworthy Boot Design for Routers and Switches through ETSI EN 304 627 AC-INTEGRITY-1-02 As the EU Cyber Resilience Act (CRA) gradually enters the technical standard implementation phase, manufacturers of routers, Internet-connected modems, and switches need to re-examine their designs for Secure Boot, Firmware Integrity, and Root of Trust. ETSI is currently drafting EN…
As the European Union’s Cyber Resilience Act (CRA) moves toward full implementation, manufacturers across multiple industries are assessing its impact on their products and development processes. A fundamental question The One Lab’s CRA consulting team hears at the outset of nearly every CRA project: “What category does my product belong to under the CRA?” This…
One of the most common questions in the realm of cybersecurity compliance, particularly concerning the EU Cyber Resilience Act (CRA), is whether existing IEC 62443 certification automatically translates to CRA compliance. The short answer is: not necessarily. While IEC 62443 is a widely referenced cybersecurity framework, it’s crucial to understand that it should not be…