https://craprepared.com/resources/Vodiči o CRA za proizvajalceslhttps://craprepared.com/resources/cra-and-open-source-software/https://craprepared.com/resources/cra-and-open-source-software/Wed, 07 Oct 2026 00:00:00 GMTKako CRA obravnava odprto kodo: gospodarska dejavnost, proizvajalci, ki jo vključijo, upravljavci odprtokodne programske opreme in skrbni pregled.https://craprepared.com/sbom/cra/https://craprepared.com/sbom/cra/Wed, 07 Oct 2026 00:00:00 GMTKaj CRA zahteva za SBOM: Priloga I, del II(1), format, najpomembnejše odvisnosti, kdo ga vidi in kako se povezuje z obravnavo ranljivosti.https://craprepared.com/resources/cra-annex-i-explained/https://craprepared.com/resources/cra-annex-i-explained/Wed, 07 Oct 2026 00:00:00 GMTRazlaga Priloge I CRA po domače: lastnosti izdelka iz dela I (a) do (m) in obravnava ranljivosti iz dela II, točke 1 do 8, za inženirje.https://craprepared.com/resources/cra-annex-ii-explained/https://craprepared.com/resources/cra-annex-ii-explained/Wed, 07 Oct 2026 00:00:00 GMTKaj morate po Prilogi II CRA povedati uporabnikom: kontakt, točka za ranljivosti, namen, končni datum podpore, posodobitve in razgradnja.https://craprepared.com/cra/technical-documentation/https://craprepared.com/cra/technical-documentation/Wed, 07 Oct 2026 00:00:00 GMTKontrolni seznam za tehnično mapo po Prilogi VII: opis izdelka, zasnova, obravnava ranljivosti, ocena tveganj, testi in izjava.https://craprepared.com/resources/cra-ce-marking-explained/https://craprepared.com/resources/cra-ce-marking-explained/Wed, 07 Oct 2026 00:00:00 GMTKako deluje oznaka CE po CRA: kdaj se namesti, kje pri strojni in programski opremi, EU izjava o skladnosti in številka priglašenega organa.https://craprepared.com/cra/conformity-assessment/https://craprepared.com/cra/conformity-assessment/Wed, 07 Oct 2026 00:00:00 GMTKako deluje ugotavljanje skladnosti po CRA: notranja kontrola, priglašeni organi za nekatere pomembne in kritične izdelke, moduli A, B, C, H.https://craprepared.com/resources/cra-coordinated-vulnerability-disclosure/https://craprepared.com/resources/cra-coordinated-vulnerability-disclosure/Wed, 07 Oct 2026 00:00:00 GMTKaj CRA zahteva za usklajeno razkritje ranljivosti: politika, kontaktni naslov, obravnava poročil in objava popravkov. Kaj vsebuje dobra politika CVD.https://craprepared.com/resources/cra-cybersecurity-risk-assessment/https://craprepared.com/resources/cra-cybersecurity-risk-assessment/Wed, 07 Oct 2026 00:00:00 GMTKaj CRA zahteva od ocene tveganj za kibernetsko varnost izdelka: vsebina, povezava s Prilogo I, posodabljanje v obdobju podpore in tehnična mapa.https://craprepared.com/cra/classification/https://craprepared.com/cra/classification/Wed, 07 Oct 2026 00:00:00 GMTRazvrstitev po CRA: privzeti izdelki, pomembni razreda I in II (Priloga III), kritični (Priloga IV) in kako spremenijo pot ugotavljanja skladnosti.https://craprepared.com/resources/cra-psirt/https://craprepared.com/resources/cra-psirt/Wed, 07 Oct 2026 00:00:00 GMTCRA PSIRT ne imenuje, a ga obravnava ranljivosti in poročanje v praksi zahtevata. Kaj PSIRT počne in kako ga lahko vodijo majhne ekipe.https://craprepared.com/cra/reporting/https://craprepared.com/cra/reporting/Wed, 07 Oct 2026 00:00:00 GMTPoročanje po členu 14 CRA velja od 11. septembra 2026: zgodnje opozorilo v 24 urah, obvestilo v 72 urah, končno poročilo, platforma za poročanje in priprava.https://craprepared.com/cra/requirements/https://craprepared.com/cra/requirements/Wed, 07 Oct 2026 00:00:00 GMTKaj CRA zahteva od proizvajalcev: ocena tveganj, zahteve iz Priloge I, obravnava ranljivosti, dokumentacija, skladnost, oznaka CE in poročanje.https://craprepared.com/resources/cra-secure-by-design-requirements/https://craprepared.com/resources/cra-secure-by-design-requirements/Wed, 07 Oct 2026 00:00:00 GMTKako CRA pretvori varnost v zasnovi in privzeto varnost v zahteve: točke Priloge I, del I, odločitve na podlagi tveganj in dokazila inženirjev.https://craprepared.com/cra/support-period/https://craprepared.com/cra/support-period/Wed, 07 Oct 2026 00:00:00 GMTKako določiti obdobje podpore po CRA: najmanj pet let, razen če se izdelek pričakovano uporablja krajše, dejavniki odločitve in dokumentiranje.https://craprepared.com/resources/cra-third-party-software-components/https://craprepared.com/resources/cra-third-party-software-components/Wed, 07 Oct 2026 00:00:00 GMTKako izpolniti skrbni pregled komponent tretjih oseb po CRA: izbira, SBOM, preverjanje vzdrževanja, poročanje navzgor, konec življenjske dobe.https://craprepared.com/cra/timeline/https://craprepared.com/cra/timeline/Wed, 07 Oct 2026 00:00:00 GMTKljučni datumi CRA: v veljavi 10. 12. 2024, priglašeni organi 11. 6. 2026, poročanje 11. 9. 2026, večina obveznosti 11. 12. 2027.https://craprepared.com/resources/cra-vs-iso-27001/https://craprepared.com/resources/cra-vs-iso-27001/Wed, 07 Oct 2026 00:00:00 GMTISO 27001 certificira sistem upravljanja informacijske varnosti organizacije. CRA določa pravne varnostne zahteve za vsak izdelek. Prekrivanja in vrzeli.https://craprepared.com/resources/cra-vs-nis2/https://craprepared.com/resources/cra-vs-nis2/Wed, 07 Oct 2026 00:00:00 GMTCRA ureja varnost izdelkov z digitalnimi elementi. NIS2 ureja upravljanje tveganj kibernetske varnosti organizacij. Razlike in medsebojno delovanje.https://craprepared.com/resources/cra-vulnerability-management-requirements/https://craprepared.com/resources/cra-vulnerability-management-requirements/Wed, 07 Oct 2026 00:00:00 GMTObravnava ranljivosti po Prilogi I, del II, v praksi: opredelitev, odprava, testiranje, razkritje, politika usklajenega razkritja in razširjanje posodobitev.https://craprepared.com/sbom/cyclonedx-and-spdx/https://craprepared.com/sbom/cyclonedx-and-spdx/Wed, 07 Oct 2026 00:00:00 GMTCycloneDX in SPDX, primerjana za uporabo po CRA. Oba sta strojno berljiva formata SBOM. Kako izbrati glede na orodja, uporabnike in namen.https://craprepared.com/cra/scope/https://craprepared.com/cra/scope/Wed, 07 Oct 2026 00:00:00 GMTKako ugotoviti, ali velja CRA: izdelki z digitalnimi elementi, podatkovna povezava, gospodarska dejavnost, vloge, izključitve in odprta koda.https://craprepared.com/en/resources/cra-reporting-obligations/https://craprepared.com/en/resources/cra-reporting-obligations/Wed, 07 Oct 2026 00:00:00 GMTCRA Article 14 reporting has applied since 11 September 2026: early warning in 24 hours, notification in 72 hours, final report and the reporting platform.https://craprepared.com/en/resources/cra-sbom-requirements/https://craprepared.com/en/resources/cra-sbom-requirements/Wed, 07 Oct 2026 00:00:00 GMTWhat the Cyber Resilience Act requires for SBOMs: Annex I Part II(1), machine-readable format, top-level dependencies and how it ties into vulnerability handling.https://craprepared.com/en/resources/cra-technical-documentation-annex-vii/https://craprepared.com/en/resources/cra-technical-documentation-annex-vii/Wed, 07 Oct 2026 00:00:00 GMTA checklist for the CRA technical file under Annex VII: product description, design, vulnerability handling, risk assessment, support period, tests and declaration.https://craprepared.com/en/resources/cra-timeline/https://craprepared.com/en/resources/cra-timeline/Wed, 07 Oct 2026 00:00:00 GMTCyber Resilience Act key dates: in force 10 December 2024, notified bodies 11 June 2026, reporting 11 September 2026, most obligations 11 December 2027.https://craprepared.com/en/resources/cra-vulnerability-management/https://craprepared.com/en/resources/cra-vulnerability-management/Wed, 07 Oct 2026 00:00:00 GMTCRA Annex I Part II vulnerability handling in practice: identification, remediation, testing, disclosure, CVD policy and update distribution.https://craprepared.com/en/cra/https://craprepared.com/en/cra/Wed, 07 Oct 2026 00:00:00 GMTThe Cyber Resilience Act (CRA), Regulation (EU) 2024/2847, sets mandatory cybersecurity requirements for products with digital elements sold in the EU.https://craprepared.com/en/resources/does-the-cra-apply/https://craprepared.com/en/resources/does-the-cra-apply/Wed, 07 Oct 2026 00:00:00 GMTHow to tell whether the Cyber Resilience Act applies: products with digital elements, data connection, commercial activity, roles, exclusions and open source.https://craprepared.com/resources/how-to-prepare-for-the-cra/https://craprepared.com/resources/how-to-prepare-for-the-cra/Wed, 07 Oct 2026 00:00:00 GMTPraktičen načrt priprave na CRA: obseg, analiza vrzeli, ocena tveganj, SBOM, obravnava ranljivosti, poročanje, dokumentacija in pripravljenost na skladnost.https://craprepared.com/resources/is-a-penetration-test-enough-for-cra/https://craprepared.com/resources/is-a-penetration-test-enough-for-cra/Wed, 07 Oct 2026 00:00:00 GMTNe. Penetracijski test je en vložek v dokazila CRA. CRA zahteva tudi oceno tveganj, varno zasnovo, redno testiranje, obravnavo ranljivosti in dokumentacijo.https://craprepared.com/resources/is-an-sbom-enough-for-cra/https://craprepared.com/resources/is-an-sbom-enough-for-cra/Wed, 07 Oct 2026 00:00:00 GMTNe. SBOM je ena zahteva iz Priloge I, del II. CRA zahteva tudi oceno tveganj, varno zasnovo, obravnavo ranljivosti, dokumentacijo, poročanje in skladnost.https://craprepared.com/resources/is-iso-27001-enough-for-cra/https://craprepared.com/resources/is-iso-27001-enough-for-cra/Wed, 07 Oct 2026 00:00:00 GMTNe. ISO 27001 pomaga pri upravljanju, ne pokriva pa zahtev za zasnovo izdelka, SBOM, obravnave ranljivosti v obdobju podpore, dokumentacije ali oznake CE.https://craprepared.com/product-security/https://craprepared.com/product-security/Wed, 07 Oct 2026 00:00:00 GMTVarnost izdelkov je disciplina za skladnostjo s CRA: ocena tveganj, varen razvoj, SBOM, testiranje, obravnava ranljivosti, razkritje in podpora.https://craprepared.com/sbom/https://craprepared.com/sbom/Wed, 07 Oct 2026 00:00:00 GMTKako CRA obravnava kosovnice za programsko opremo: kaj je zahtevano, formati, VEX, obravnava ranljivosti in odprtokodne komponente. Začnite tukaj.https://craprepared.com/sbom/vex/https://craprepared.com/sbom/vex/Wed, 07 Oct 2026 00:00:00 GMTKaj je VEX in kako podpira obravnavo ranljivosti po CRA: izjave o tem, ali ranljivost vpliva na vaš izdelek, s stanji, utemeljitvami in življenjskim ciklom.https://craprepared.com/cra/https://craprepared.com/cra/Wed, 07 Oct 2026 00:00:00 GMTCyber Resilience Act (Akt o kibernetski odpornosti, Uredba (EU) 2024/2847): komu velja, kaj zahteva, kdaj se uporablja in kako se proizvajalec pripravi.https://craprepared.com/resources/what-should-a-cra-sbom-contain/https://craprepared.com/resources/what-should-a-cra-sbom-contain/Wed, 07 Oct 2026 00:00:00 GMTPraktični nasveti o vsebini SBOM za CRA: minimalni elementi, identifikatorji, različice, odnosi, globina in preverjanje kakovosti.