Cyber Resilience Act Training for Developers
This training course presents this material in a practical manner tailored to a technical audience. Participants will learn how to fulfil the requirements of the CRA and to implement appropriate measures and activities in real-world scenarios.
At a glance
General information
- Three days of practice-based training (on-site or remote)
- Flexible training agenda with customisable technical focus areas
Target group
Software developers
Application examples
Overview of security activities specific to the Cyber Resilience Act
Description
With the increasing significance of software systems for digital products comes an increase in the number of threats to which these systems are exposed. A developer training course specifically referencing the Cyber Resilience Act is decisive for embedding security into the development process at an early stage and minimising risks effectively. If security is neglected, it often remains only a matter of time until vulnerabilities cause serious problems.
The EU’s Cyber Resilience Act increases the requirements for a large number of products and aims to ensure the more comprehensive and consistent implementation of security measures throughout the development process. Our Cyber Resilience Act Training Course for Developers enables companies to address these obligations. It also allows companies to improve the level of security awareness within their development teams and the quality of the systems they develop, independent of regulatory requirements.
In addition to ensuring CRA compliance, this also adds long-term value to companies’ business models. After all, reputational damage (and the associated loss of trust) caused by negative reporting poses as great a risk to systems and companies as the vulnerabilities, attacks, and data losses themselves.
Our Cyber Resilience Act Training Course provides a fundamental overview of all the relevant phases of a secure software development process and the precise stipulations of the Cyber Resilience Act. Participants will learn to evaluate the security of their software more effectively and to implement appropriate measures and activities in real-world scenarios. The course is based on our own experience in software development projects, which enables us to share real-life best practices.
Agenda
- Introduction to Security: Motivation and Security Goals
- Context: CRA and Software Security
- Secure Design: Threat Modelling, Security Requirements, Risk Assessment
- Secure Coding: Security Principles, Cryptography, Coding Guidelines
- Supply Chain Security: Threats and Solutions, SBOM
- Managing Vulnerabilities: Assessment and Prioritization Using CVSS 4.0, EPSS, and KEV
- Secure Testing: Static and Dynamic Security Testing, Test Tooling
In our in-house format, we tailor the content specifically to your situation, your architecture, and your tech stack. In addition to the standard agenda, we delve deeper into topics relevant to you—such as SAST/DAST, incident response, supply chain threats, and cryptography—and discuss your specific questions using real-world examples from your organization.
Meals Included: For our in-person training sessions, a hot lunch, snacks, and beverages are included in the seminar fee.
Typical questions we answer:
- What role do developers play in the practical implementation of the CRA?
- How can software developers identify and assess threats and risks for their software?
- What security requirements should be taken into account during software development, and how can these be implemented?
- What best practices exist for implementing authentication, authorisation, or cryptographic processes?
- What tools and methods are available for testing and monitoring software security?
- How important is supply chain security, and what measures does the CRA require?
- signed certificate of participation
- experienced trainers
- small training groups
Trainers
Our trainers are field-tested experts in their areas of expertise. Through their work in projects, they expand their knowledge day by day and pass on this know-how in their trainings - application-oriented and practice-oriented.
Dr Michael Gerhäuser
Dr. Michael Gerhäuser has been working professionally as a software developer since 2014 and joined the inovex team in 2022. He specialises in the design and implementation of web applications, both frontend and backend with operations and monitoring. He is also interested in topics such as software performance and web application security. In his private life, Michael is involved in the local software craftsmanship community by organising a Rust Meetup and as a member of the organisation team of a local barcamp.
Simon Dreher
Michael Fuchs
Dr. Christoph Erhardt
Why inovex Academy?
Our offerThe inovex Academy has set itself the task of passing on knowledge about methods and technologies that we already use successfully in our projects.
Exchange experiences
In our open training courses, we attach great importance to the exchange of experience among like-minded people. Learn from and with other experts.
Curated content
All training content is carefully selected to achieve the best possible learning effect and to convey as much content as possible.
Individual Assistance
Our trainers come from a practical background and have already tested and successfully applied many of the contents taught in their daily work.
Customized flight altitude
Our training courses start where many standard courses end. Thanks to their interactive structure, we dynamically adapt the level to the participants' expert knowledge and are happy to delve deeply into complex issues.
Upcoming trainings
09:00–17:00 (remote)
09:00–17:00 (remote)
09:00–17:00 (remote)
09:00–17:00 (Erlangen)
09:00–17:00 (Erlangen)
09:00–17:00 (Erlangen)
09:00–17:00 (Cologne)
09:00–17:00 (Cologne)
09:00–17:00 (Cologne)
09:00–17:00 (remote)
09:00–17:00 (remote)
09:00–17:00 (remote)
09:00–17:00 (Karlsruhe)
09:00–17:00 (Karlsruhe)
09:00–17:00 (Karlsruhe)
09:00–17:00 (remote)
09:00–17:00 (remote)
09:00–17:00 (remote)
Frequently Asked Questions
Warum ist der Cyber Resilience Act wichtig für Developers?
Wie ist das Training strukturiert?
Warum ist ein gezieltes Developer Training für den Cyber Resilience Act wichtig?
Gibt es ein Zertifikat nach Abschluss des Cyber Resilience Act Trainings?
Supplementary information
Collin Rogowski
Head of inovex Academy
I look forward to your inquiry.
Collin Rogowski
We are your partner for successful trainings
We would be happy to talk to you personally about your concerns. Get in touch now!
- Individual training offer for your company
- Over 25 years of experience as inovex Academy