The rest of the post is in Finnish, as is the event itself, except for its first talk "The CRA: objectives and implementation" by Tommaso Bernabo (European commission). Traficom, liikenne- ja viestintäministeriö sekä Kyberala ry järjestävät EU:n...
Henry Haverinen and Sami Lempinen from Cyberismo talked at the HelSec January 2026 meetup, which was organised by Tietoturvatoimisto Monti. The topic of the talk was Building EU CRA compliant products: lessons learned and the case for security-as-code. Please find...
Let’s be honest. Secure development often feels like a maze of frameworks, checklists, and compliance requirements. Whether you're wrangling with threat models or trying to keep up with the latest cybersecurity regulations, it’s easy to feel overwhelmed. But what...
In today’s hyperconnected world, digital elements are embedded in everything from smart home devices to industrial machinery. However, with innovation comes responsibility. The EU Cyber Resilience Act (CRA) is reshaping the landscape by introducing a risk-based approach to cybersecurity, requiring all products with digital components to undergo a thorough cybersecurity risk assessment before hitting the market.
The Digital Security fair (Digiturvallisuusmessut 2025) connects digital security experts, companies interested in information security, and cyber students and educational institutions in one day. The fair will take place on April 10, 2025 in Paviljonki,...
We are thrilled to announce that the first version of the much-anticipated ISMS Essentials content module is now publicly available! This module represents our initial attempt to create an information model for the basics of information security management, and you...
The EU Cyber Resilience Act is a fundamental change. Its impacts range from portfolio and product management and procurement to development, manufacturing, maintenance and cyber security response. The following mind map summarises the aspects of the act that I...
Chances are that if you are building any type of non-trivial software product, you are standing on the shoulders of giants and rely on an existing ecosystem of open source or commercial components. You cannot really compile even the simplest Hello World in C...
This post is the third part of a series of blog posts, where we discuss the impacts of the new EU Cyber Resilience Act and compare it briefly to the industrial cybersecurity standard IEC 62443. In this Part 3, we will discuss the practical implications that the act...
This post is the second part of a series of three blog posts, where we discuss the impacts of the new EU Cyber Resilience Act (CRA) and compare it briefly to the industrial cybersecurity standard IEC 62443. If you haven't read Part 1 of the series yet, then you can...