Submissions Create — NC3's Application Platform

Country of registration *

Number of employees *

Sector(s) served *

Please specify

Which role(s) does your organisation have in the lifecycle and placing on the market of products with digital elements? *

Manufacturer Importer Distributor Authorised representative Software developer/supplier Component or sub-component provider Product/system integrator Service provider Other

How familiar are you with CRA requirements? *

When did your organisation first start actively considering the CRA? *

Do you believe your product falls under the Cyber Resilience Act (CRA)? *

What is the current lifecycle stage of the product? *

What type(s) of technology does the product or product group assessed in this survey involve? *

Hardware Embedded software/firmware Standalone software Cloud/SaaS Web application Mobile application IoT/connected device AI/ML-enabled system Other

Please develop

Which CRA product family best describes this product or product group? *

Which product classification best describes your product within the selected family? *

Please specify

Does this product/product group include or depend on open-source software and, if so, what role(s) does your organisation have in relation to it? *

The product/product group does not include or depend on open-source software User/integrator of open-source components Contributor to an open-source project Developer/maintainer of an open-source project Open-source software steward Distributor/packager of open-source software Other Don't know

How would you currently rate your company's readiness to meet CRA requirements? *

Which cybersecurity practices do you already implement? *

Which cybersecurity standards, frameworks, certifications, regulations or practices does your organisation currently apply? *

Who is primarily responsible for cybersecurity in your organization?? *

What were the main triggers for your organisation to start considering CRA implementation? (3 maximum) *

What would be your organisation's main strating points for implementing the Cyber Resilience Act (CRA)? (3 maximum) *

Who would primarily lead CRA implementation? *

Approximately how long do you expect CRA implementation to take? *

What are the main difficulties you expect to face in implementing CRA? (maximum 3) *

Which aspects of CRA are most unclear to you? (maximum 3) *

Which technical areas are likely to be the most challenging? (maximum 3) *

Considering the staff, expertise, time and budget currently available, how available, how well equipped is your organisations to implement CRA requirements? *

Which types of support would be most useful for implementing the CRA? (maximum 3) *

To what extent can existing cybersecurity practices, standards or processes be reused when implementing the CRA? *

What factors have helped your organisation establish or improve cybersecurity practices, if any? (maximum 3) *

What opportunities or benefits could CRA compliance create? (maximum 3) *

If you have already started implementing CRA, please briefly describe one concrete difficulty you have encountered or expect to encounter in CRA implementation, how you addressed or expect to address it, and what support would have helped.

0/600 characters

Please provide an email address if you would like to be contacted for a follow-up interview. By sharing your experience, challenges and insights, you can help ensure that the voice of SMEs is heard and that their needs and concerns are communicated to relevant stakeholders. Your input can contribute to identifying practical solutions and support measures to address the challenges SMEs face in implementing the Cyber Resilience Act (CRA).

Email address

Open comments - Any additional comments, recommendations or lessons-learned regarding CRA implementation?

0/600 characters

Survey on CRA implementation challenges and opportunities for SMEs

1. SME Context