CRA Law : What no one is telling you (and you should already know)

CRA Law : What no one is telling you (and you should already know)

What will you learn in this webinar?

  • Contexto de CRA
  • Aplicabilidad y actores implicados
  • Clasificación de productos
  • Requisitos clave del CRA
  • Fechas relevantes
  • Régimen sancionador
  • Estrategia de cumplimiento
  • Retos, riesgos y oportunidades

The Cyber Resilience Act (CRA) marks a turning point in European cybersecurity regulation, establishing for the first time mandatory requirements to ensure the security of digital products throughout their lifecycle.

This new regulatory framework introduces demanding obligations in areas such as vulnerability management, security by design and incident reporting, directly impacting manufacturers, developers and technology distributors.

In this webinar, cybersecurity experts will take an in-depth look at the scope of the CRA, its practical implications and the keys to efficiently addressing compliance. Through a structured and business-oriented approach, a clear roadmap will be presented that will enable organizations to anticipate regulatory requirements, reduce risks and transform compliance into an opportunity to strengthen their market positioning.

Fill out the form to register for the webinar

CAPTCHA
Esta pregunta es para comprobar si usted es un visitante humano y prevenir envíos de spam automatizado.

Who will guide us through the session?

Alberto Villar
Security Consultant
Computer Engineer from the Autonomous University of Madrid, with an Erasmus stay at the University of Helsinki. Throughout his career, he has obtained certifications such as PCI QSA, PCI SSA, PCI PA QSA, PCIP, CISSP, CCSP, CSSLP, CISM, CSFPC, SFPC, and ISO 27001 – Lead Auditor, reflecting his deep technical expertise and commitment to best practices in information security.
Since 2015 he has been part of Internet Security Auditors, where he designs and implements PCI DSS certification projects, as well as migrations and adaptations of regulations, standards, and frameworks such as PCI. He also leads consulting services in ISO 2700X, NIST and CIS, risk analysis (MAGERIT, OCTAVE, CRAMM), PKI infrastructures, electronic signature, TISAX, and the National Security Scheme.
He has delivered numerous trainings, courses, and mentoring sessions in PCI DSS, ISO 27001, risk analysis, and secure software development, combining technical rigor with strong communication skills to convey knowledge at all levels.