Since 11 September 2026, actively exploited vulnerabilities must be reported within 24 hours.If it applies, how ready are we? Find your CRA gaps (6 questions, 2 min) →Find your CRA gaps
System 2 / 6
A scanner and a 30-minute weekly triage
For heads of engineering, DevOps and the CRA owner
What it is
A tool that checks your parts list against newly published security flaws, plus a short weekly meeting that decides what to fix and by when.
Why it matters
Attackers move fast once a flaw is public. Fixing things twice a year is too slow.
It works when
Every alert gets a decision within two working days.
What the law says
The CRA requires manufacturers to address and remediate vulnerabilities without delay, with security updates kept separate from feature updates where technically feasible (Annex I, Part II (2)), and to test and review security regularly (Annex I, Part II (3)). A scanner plus a weekly triage meeting is our recommended way of meeting that duty.
Example: ABC Heating Systems, a fictional Danish maker of connected thermostats.
Kasper Nørgaard
DevOps engineer
Connects the scanner to the parts lists, so a new flaw in any part raises an alert.
Jonas Brandt
Head of Engineering, CRA owner
Runs a 30-minute meeting every week: does this flaw affect us, how serious is it, and by which date will it be fixed?
The developers
Engineering team
Build the fix and ship it on its own, instead of waiting for the next feature release.
A small team can run this system too. Here is what it takes.
Do it yourself
A weekly scan, a second inbox for security mail, and an on-call schedule so it is read every day.
Half a day of help
Someone to set up the scanner once and show one person how to read a published flaw.
Where SPS Digital Tech helps
We help you choose a scanner and get a weekly triage running until your team can run it alone.
The story behind it: 900,000 routers, one weak spot, November 2016
900,000 homes. One weak spot. One Sunday night.
Read the storyWe will send you the step-by-step checklist we use with clients, and answer any questions about your setup.