SME Toolkit

Practical resources to help your organization understand, prepare for, and demonstrate compliance with the EU Cyber Resilience Act (CRA).

Toolkit Templates

Become an Early Adopter

We are currently granting exclusive early access to our CRA compliance templates. For free access to these resources, kindly provide a brief feedback on how they worked for your organization.

Please let us know if you act as a Manufacturer, Importer, or Distributor so we can send the appropriate toolkit to you.

Request Toolkit via Email: alexander.saenn@it-sicherheitscluster.de

What's Included in the Toolkits?

We have developed specific template packs tailored to your role under the Cyber Resilience Act.

Toolkit for Manufacturers

For SMEs that develop or manufacture products with digital elements. This toolkit includes the core documentation required for full CRA compliance.

1. Awareness & Training Materials

Resources to educate your workforce and engineering teams on CRA obligations without requiring an advanced cybersecurity background.

  • Cybersecurity Awareness Guide
    A foundational text translating legal requirements into simple, daily habits for all SME employees.
  • Low-Threshold Cyber Resilience Training
    A guide that simplifies regulatory requirements into actionable steps.

2. Internal Process & Compliance Templates

The core paperwork required to satisfy EU auditors and structure your mandatory technical compliance folder.

  • Cybersecurity Risk Assessment Matrix
  • Vulnerability & Incident Handling
  • Simplified Technical Documentation Index
  • EU Declaration of Conformity
  • Simplified EU Declaration of Conformity

3. Customer-Facing Templates

Ready-to-use templates that strictly fulfill CRA Annex II mandates on customer communication and transparency.

  • Product Security Manual
  • Support Period Policy
  • Cybersecurity Factsheet
  • Security Update Advisory
  • Coordinated Vulnerability Disclosure Policy

Toolkits for Importers & Distributors

If you do not develop or manufacture products, your CRA obligations are much lighter. Choose the toolkit that fits your specific role.

Toolkit for Importers

For SMEs bringing products with digital elements into the EU market. Focuses on verification and supply chain due diligence.

  • Cybersecurity Awareness Guide
  • Compliance Handbook
  • Supplier Attestation Form
  • Warehouse Inspection Log
  • Non-Compliance Notice
  • Security Alert
  • Vulnerability Escalation Notice
  • Compliance & Retention Tracker

Toolkit for Distributors

For SMEs reselling products in the EU. Focuses on basic verification and avoiding compliance pitfalls.

  • Cybersecurity Awareness Guide
  • Compliance Handbook
  • Warehouse Visual Check
  • Non-Compliance Report
  • Security Alert
  • Vulnerability Escalation Notice
  • Compliance & Retention Tracker

Disclaimer: Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Education and Culture Executive Agency (EACEA). Neither the European Union nor EACEA can be held responsible for them.