Event type: Hybrid (onsite and online).
Venue: SellaLab Innovation Center, Corso Galileo Ferraris 32, 10121, Turin (TO), Italy (Google maps). Only 50 onsite seats available. Presentations will be delivered in Italian whenever possible.
DOWNLOAD THE SLIDES
The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance.
This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops are organised throughout Europe.
Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups. During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development, focusing on boot managers, consumer wearables, and smart meter gateways, and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.
Organised by the EU-funded projects CYBERSTAND.eu and STAN4CRA.eu, the workshops bring together key EU-funded experts and projects developing SME-friendly standards, CRA compliance tools and funding:
- CYERSTAND.eu: Managing open calls to fund contributions to develop standards for the CRA.
- CRA-AI: AI-powered platform built to guide product companies through the full CRA conformity journey.
- OCCTET: Open-source toolkit to automate the compliance process for Free and Open Source Software (FOSS) used in digital products
- TRUSTBOOST - Unifying & Upgrading Certification Capabilities Across Europe
- SECURE - Strengthening EU SME cyber resilience
Why join
- Understand what the CRA requires and its implications for SMEs.
- Learn which standards matter and how they support compliance.
- Presentations from CRA standards rapporteurs on ongoing standardisation work.
- Discover compliance tools, practical guides, and funding available through CRA-related EU-funded projects.
- Gain practical insights tailored to SME on how CRA requirements translate into product development and conformity processes.
Agenda
| Time (CET) | Session | Speakers |
|---|---|---|
9:00
| Registrazione e caffè di benvenuto | |
| 9:30 - 10:20 | Introduzione al CRA e Ruolo di ETSI e CEN-CENELEC nella richiesta di standardizzazione (presentations in English) | Chair: Federica Bozzi, Next G Cloud Carla Bertuzzi, Director, SellaLab Camille Dornier - EC DG CNECT (Remote) Yves Leboucher, Project Manager, CEN-CENELEC (Remote) Laure Pourcin, Technical Officer, ETSI |
| 10:20 - 10:30 | Il mercato italiano e il CRA | Luca Nicoletti, Head of the Industrial, Technological and Research Programmes Service, ACN (Remote) |
10:30
| Il ruolo di UNINFO: come partecipare al processo di standardizzazione italiano (presentazione in italiano) | Domenico Squillace, Presidente, UNINFO |
10:50
| Perché la standardizzazione è importante per le micro e piccole imprese (presentazione in italiano) | Fabrizio Peresson, Presidente, Confartigianato ICT |
11:05
| Pausa networking | |
| 11:30 - 13:00 | Presentazione di alcune bozze di standards da parte dei rapporteurs (presentazione in italiano and English) | Smart Meter Gateways - Enrico Frumento Consumer Wearables - Davide Pratone Boot Managers - Christian Horchert |
13:00
| Pranzo e networking | |
14:00
| Strumenti per la conformità e finanziamenti - Progetti Digital Europe Programme (DEP) (presentation in English) | Chair - Nicholas Ferguson, Trust-IT Services & Cyberstand.eu CRA-AI - Moreno Buffolo, CyberCertLabs OCCTET - Davide Iaccarino, Digital SME Alliance CRACoWi - Pablo Endres, SevenShift (Remote) SECURE - Danilo D'elia, Agenzia per la Cybersicurezza Nazionale (ACN) TRUSTBOOST - Khalimatou Samirah, National Standards Authority of Ireland (Remote) |
| 14:45 - 15:45 | Tavola rotonda - Il CRA e le PMI: trasformare la compliance in vantaggio competitivo (presentazione in italiano) | Alessio Calogero Di Carlo, QUALCOMM (moderatore) Dario Sabella, CEO, Next G Cloud Anna Maria Mandalari, University College London/Mulini and Cyberstand.eu Strategy Board member Francesca Nava, Coordinatrice gruppo di lavoro nazionale Cybersecurity di Confartigianato ICT e membro della UNI/CT 510 Cosimo Senni Guidotti Magnani - Drivesec
|
15:45
| Pausa networking | |
16:15
| Open consultations - come contribuire alla fase di drafting (presentazione in italiano) | Federica Bozzi, STF701 Project Leader & Next G Cloud |
| 16:30 - 16:45 | Linee Guida Commissione Europea gruppo di esperti | Vittorio Bertola - Head of Policy & Innovation at Open-Xchange |
16:45
| Le implicazioni del CRA sul mercato italiano e sulle PMI |