Projects

Project summary: CRACoWi seeks to meet the escalating cybersecurity challenges in the European digital market. As a response to the European Commission’s Cyber Resilience Act, it introduces cybersecurity prerequisites throughout the product supply chain. CRACoWi, or the “Cyber Resilience Act – Compliance – Wizard” is being developed by the CRACoWi consortium to support SME manufacturers, distributors, and importers in meeting these conditions. Wizard emphasizes cybersecurity from a product’s inception through its lifecycle, offering automated CRA compliance assessments, documentation generation, and enhanced product security.

Project name: Cyber Resilience Act Compliance Wizard

Project acronym: CRACoWi

Call: DIGITAL-ECCC-2023-DEPLOY-CYBER-04

Topic: DIGITAL-ECCC-2023-DEPLOY-CYBER-04-EULEGISLATION

Project number: 101158539

Project starting date: 1 September 2024

Project end date: 31 August 2027

Project duration: 36 months

Project coordinator: ITML

Consortium partners: Information Technology for Market Leadership, Motor Oil Hellas, Motor Oil Renewable Energy, Onekey, Bureau Vertias, Centre for Technological Support, Development and Innovation, SLOA AppArt, Tiko Pro, Erminas GmbH, Sevenshift, Meazon SA, Digital Innovation Hub Slovenia, URSIV.

AppArt’s Role in the project: AppArt is a core partner in the CRACoWi project. It leads Work Package 5 (WP5), which focuses on the evaluation and validation of the various use cases that will be implemented within the project. AppArt also takes part in Work Package 3 (WP3) as the task leader for determining procedures to ensure the implementation of the Cyber Resilience Act (CRA) in the Security Operations Center (SOC). In addition, AppArt helps build and test two use cases, one for checking the CRA on important products (UC2c) and another for critical infrastructures (UC6). It also leads Use Case 3 (UC3), which focuses on evaluating the CRA for importers and distributors. With its strong experience in software design and system integration, AppArt plays an important role in developing and testing the CRACoWi tools to make sure they meet the project’s goals.

Support certifications: CRACoWi aims to provide the means for actors to showcase their compliance to regulatory authorities and additionally, it seeks to enable actors to communicate their security levels to both B2B and B2C markets. Along the certification strategy, the project will leverage existing certification schemes whenever possible and when necessary, develop its own certification standards. Notably, the CRACoWi consortium includes members who possess the capacity and authorization to issue certificates and product labels.

Update (comprehensive product life cycle management): The project will encompass the entire life cycle of products, including updates (full life cycle inclusion) and will continuously monitor newly discovered vulnerabilities as key component of this approach.

Project value: 8 443 840.80

Social Media: LinkedIn | YouTube | X platform |

Official website: www.cracowi.eu/

Disclaimer: Funded by the European Union. Views and opinions expressed at the website are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Cybersecurity Competence Centre. Neither the European Union nor the European Cybersecurity Competence Centre can be held responsible for them.