SCIOPTA Systems GmbH is pleased to announce its readiness to support the EU Cyber Resilience Act (CRA), Regulation (EU) 2024/2847. Our real-time operating system (RTOS) and middleware products are developed with a secure-by-design architecture, enabling manufacturers to build systems that align with the CRA’s essential cybersecurity requirements.
The CRA establishes horizontal cybersecurity rules for products with digital elements. Our compliance framework provides manufacturers with:
-
Robust Security Foundations: SCIOPTA’s deterministic, message-based RTOS is built on secure design principles including memory protection (MMU/MPU) and module isolation, directly supporting CRA’s secure development mandates.
-
Supply Chain Transparency: We provide a machine-readable Software Bill of Materials (SBOM) in SPDX format for every delivery, enabling integrators to perform necessary due diligence and manage vulnerabilities effectively.
-
Secure Delivery & Integrity: Our kernel and middleware packages are delivered over HTTPS with PGP signatures, ensuring authenticity and integrity. SHA256 hashes are provided for all components.
-
Certified Development Lifecycle: Our TÜV SÜD certification (IEC 61508 SIL3, EN 50128 SIL4, ISO 26262 ASIL D) provides audited evidence of a mature development process, which is a strong foundation for CRA conformity assessment.
With the CRA’s full application approaching in December 2027, manufacturers need reliable, secure components. SCIOPTA’s proactive compliance strategy helps our customers reduce implementation effort and accelerate their regulatory readiness.
For more information on how SCIOPTA supports CRA compliance, please visit our CRA Compliance Overview page or contact us at support@sciopta.com.
