CRA (Cyber Resilience Act) Compliance

TSC Auto ID is committed to ensuring that its products comply with the European Union's Cyber Resilience Act (CRA) requirements, integrating product cybersecurity into the complete lifecycle management of product design, development, verification, release, and maintenance. To achieve this, we have established a Product Security Incident Response Team (PSIRT), vulnerability handling procedures, a Coordinated Vulnerability Disclosure (CVD) policy, security update mechanisms, and a supply chain vulnerability management system to continuously enhance product cybersecurity resilience and information security standards.

The CRA is a cybersecurity regulation enacted by the EU for Products with Digital Elements (PDEs). It requires manufacturers to continuously manage product security risks, handle vulnerabilities, provide security updates, and establish appropriate vulnerability disclosure and reporting mechanisms prior to product launch and throughout the support period, thereby mitigating the risk of cyberattacks, data breaches, or unauthorized system access. Products that meet CRA requirements are eligible for legal sale and distribution in the EU.