The project at a glance
CONFIRMATE is an innovative project co-funded by the European Union (EU) and the European Cybersecurity Competence Centre and Network (ECCC), designed to help manufacturing SMEs stay ahead of evolving cybersecurity regulations. By streamlining compliance with the EU Cyber Resilience Act (CRA), CONFIRMATE delivers open-source tools, practical training, and standardized methods that make CRA compliance more accessible, efficient, and cost-effective.
The project’s name stands for Conformity Assessment, Metrics, and Automation for the Cyber Resilience Act. Built on the open-source Clouditor framework, CONFIRMATE provides automated service decomposition and compliance views, clear assessment results, a robust penetration testing methodology, multilingual cybersecurity training modules, and a comprehensive CRA compliance guide.
Compliance tool description
- Automated Conformity Assessment Toolkit: Maps CRA essential requirements to technical controls and verification mechanisms.
- Metrics Framework: Connects regulatory obligations with measurable technical evidence.
Technical Documentation Guidance: Provides templates and methodologies for producing complete, audit-ready CRA documentation.
- Penetration Testing Methodology: Provides a structured approach for security testing aligned with CRA expectations.
- Training Modules: Provides training resources on CRA obligations, cybersecurity risks and compliance processes.
