PAXECT CRA Readiness Self-Check

CRA Readiness Self-Check

This short self-check helps connected-product organisations understand where they may need further CRA-readiness preparation.

About your answers

Please answer the questions based on your current product situation.

Some questions allow multiple answers because connected products may contain different technologies, responsibilities or business roles at the same time.

This self-check provides an initial indication only. Your answers will be reviewed in context and do not represent a certification, compliance decision or legal assessment.

1. Does your company sell or provide a connected product in the EU market?

Yes

Not sure

2. Does your product contain digital elements?

Select all elements that apply.

3. What type of connected product do you work with?

4. What is your role related to this product?

5. How would you describe your current product security preparation?

We already have a structured product security process

We have some security activities, but they are not fully structured

We mainly rely on suppliers or external support

We are just starting to prepare

We are not sure yet

6. How do you currently manage product security evidence and documentation?

We have structured evidence linked to products and versions

We collect documents, but they are not always structured or complete

Evidence is mainly provided by suppliers

We do not have a clear evidence process yet

We are not sure what evidence is needed

7. How do you handle supplier security information and follow-up?

We have a structured supplier security review process

We request information from suppliers when needed

We receive supplier information but do not have a consistent review process

We have limited supplier security information available

We are not sure what supplier information is needed

8. How do you currently manage security updates and vulnerability handling for your products?

We have a defined process for security updates and vulnerability handling

We provide updates, but the process is not fully documented

We depend mainly on suppliers for security updates

We handle issues when they occur, without a structured process

We are not sure how this is managed

9. Do you have a clear overview of product versions, firmware and software components?

Yes, we maintain structured product and component information

We have some information, but it is spread across different sources

We mainly depend on suppliers for this information

We have limited visibility into product components and versions

We are not sure what information is required

10. How do you currently assess your CRA readiness?

We perform regular internal reviews

We use external experts or consultants when needed

We review readiness only when a customer or market request requires it

We have not performed a CRA readiness review yet

We are not sure where to start

11. What would help your organisation improve CRA readiness most?

Better visibility of product security evidence

A structured way to collect and review product information

Support with supplier security information and follow-up

Clear readiness reporting for internal or customer discussions

Guidance on next steps after identifying gaps

We are still exploring what we need

Your contact details

Please provide your business contact details so PAXECT can review your self-check results and contact you if further clarification is needed.