CRA AI
Six Nations, One Mission
AI-Driven. Expert-Guided Simplifying CRA for SMEs
A European collaboration to drive CRA conformity for SMEs using AI Innovation
Our Project Story
Welcome to Project CRA-AI
The CRA-AI project will create a highly automated AI-based software platform to support SMEs and micro-enterprises at every stage of their journey to ensure conformity with the provisions of the Cyber Resilience Act”. The project is co-funded by the European Commission and supported by the European Cybersecurity Competence Centre through the Digital Europe Programme, within the call DIGITAL-ECCC-2024-DEPLOY-CYBER-06-COMPLIANCECRA, type of action: DIGITAL JU SME Support Actions.
The overall objective of the CRA-AI project is to develop an automated software platform that will guide organisations through the process of obtaining and maintaining the CE Mark, in line with the requirements of the Cyber Resilience Act (CRA). This legislation is an important part of the EU Cybersecurity Strategy and will establish a CE Mark for cybersecurity. The application of the mark on a digital product or service requires manufacturers to demonstrate that they meet the relevant cybersecurity standards, including the essential requirements in Annex 1 and the documentation obligations in Annex 2 of the CRA. As identified in the Impact Assessment carried out by the European Commission, achieving this will be challenging for many organisations, in particular small and medium-sized enterprises (SMEs). To support the widespread adoption of the CRA, this project will develop an automated software platform that will guide organisations through the process of obtaining and maintaining the CE Mark. The platform will include the features necessary for full alignment with the requirements of Annexes 1 and 2 of the CRA, including any common specifications created with regard to the essential requirements.
The project consortium bring together cyber security expertise from six member states including Ireland, Spain, France, Belgium, Romania and Lithuania. Each consortium member bring specific skills and capabilities in order to address the complex requirements of the Cyber Resilience Act. Our experts span domains such as software development, AI, CRA expertise, IoT and OT certification, EUCC, vulnerability handling, secure code analysis, penetration testing and training.
Read More
-
Project duration
24 months, starting January 1, 2025
Project budget (maximum grant amount)
€2,873,164.00 /€2,043,272.00
Simplify CRA Compliance with AI Driven Guidance, Training & Security Testing
Our Consortium
Our consortium spans 6 countries and are a mix of public bodies and cyber security companies with distinct expertise in all of the areas required to address the Cyber Resilience Act, with Cyber Cert Labs role as a co-ordinator.
Associate Partners
Dissemination
Watch video of each consortium member explaining their part in the CRA-AI project.
AI Driven Core Software
Dissemination
Training Platform
Vulnerability Handling Platform
Pilot Customer
Conformity Assessment
Become Part of the Project
Sign up as an early adopter
We are inviting European SMEs to sign up as an early adopter to the CRA-AI software platform.
You can be part of the focus groups and feedback loop that helps shape the platform! In return you will gain insights into the CRA and special early adopter rates.
Get a fast, high-level check of your CRA preparedness
Readiness Assessment Overview
As part of the dissemination work package we will conduct a market scan of SMEs using the Cyber Cert Labs Readiness Assessment. The anonymised results of the scan will be benchmarked and shared with stakeholders including NCC working group.
Want to stay in the
know?
Follow the CRA-AI project on LinkedIn to keep up to date with our progress and find out about our webinars, events, case studies, trainings and early adopter program.
Follow UsCo-Funded by the European Union
The project funded under Grant Agreement No.101190243 is supported by the European Cybersecurity Competence Centre.
Co-Funded by the European Union. The views and opinions expressed are those of the author(s) and do not necessarily reflect the views of the European Union or the European Cybersecurity Competence Centre. Neither the European Union nor the European Cybersecurity Competence Centre can be held responsible for them.
