Cybersecurity and Cyber Resilience Act

Product security throughout the product lifecycle

The Cyber Resilience Act (CRA), Regulation (EU) 2024/2847, introduces cybersecurity requirements for hardware and software products with digital elements placed on the European Union market. It addresses security throughout a product’s lifecycle, from design and development to maintenance and vulnerability management.

For companies developing electronics, embedded systems and customised solutions, cybersecurity is a consideration in technical development and collaboration with customers and suppliers. The CRA also addresses components and software that contribute to a product’s security. Its requirements depend on the product, its intended use and the role of each operator in the supply chain.

Prima Electro’s approach

Prima Electro is formalising its approach to managing cybersecurity vulnerabilities and incidents, taking into account its role for each product and the applicable agreements.

The process described in our policy covers:

• Receiving and assessing reports to identify affected products and versions, assess reproducibility and impact, and consider possible mitigation measures.
• Coordinating investigations with relevant internal teams and, where necessary, customers and suppliers of components, operating systems, software or other technologies.
• Managing and communicating actions by assessing corrective or containment measures and the information to share with relevant parties.
• Supporting responsible disclosure by encouraging authorised testing and coordinated handling of vulnerability information.

Responsibilities and applicable activities may vary depending on the product and Prima Electro’s role, for example as a manufacturer or as a supplier of components or technology.

Download the Vulnerability Disclosure and Incident Reporting Policy

Report a vulnerability or cybersecurity incident

If you believe you have identified a vulnerability or cybersecurity incident affecting a Prima Electro product, you can submit a report using the form below.

Please provide the information available to you and identify the affected product. Do not include passwords, private keys, customer production data or other unnecessary confidential information.

A report submitted to Prima Electro enables us to assess the issue. It does not replace any regulatory notifications that a manufacturer may be required to submit through the CRA Single Reporting Platform.