Cyber Security Expert
Vertical standards for security requirements
What does the work you will carry out for the CYBERSTAND SSP consist of?
The work I will carry out for the CYBERSTAND SSP consists of actively contributing to the development of harmonised cybersecurity standards under the Cyber Resilience Act by participating in relevant working groups, reviewing and commenting on draft specifications, and providing practical, lab-based expertise to ensure that the standards are technically applicable to real-world products. My contribution focuses on translating high-level security requirements into concrete, verifiable criteria, identifying implementation gaps, and helping shape standards so that they are realistic, scalable, and aligned with the needs of both product developers and assessment bodies.
What is the expected result and impact of this activity?
I expect this activity to lead to the creation of harmonised standards that are clear and practical. By contributing my hands-on evaluation experience, I aim to ensure that the developed requirements are realistic for manufacturers, and aligned with real-world security assessment practices. Through this contribution, I aim to help improve the consistency, reliability, and effectiveness of cybersecurity assessment, reducing uncertainty for industry stakeholders and supporting the EU’s broader objective of enhancing the security and resilience of digital products through robust, implementable standards.
Which aspects of the Cyber Resilience Act (CRA) standardisation are you focusing on?
I am focusing specifically on the CRA vertical standards related to Public Key Infrastructure and digital certificate issuance (Vertical 24), smart home virtual assistants (Vertical 31), smart home products with security functionalities (Vertical 32), and internet-connected toys (Vertical 33). My involvement is centred on supporting the development of standards that are technically robust, practically testable, and realistically implementable across these diverse product categories, ensuring they can be effectively applied by both manufacturers and assessment bodies in real-world conditions.
