Endpoint Cybersecurity GmbH
- EU Cyber Resilience Act (CRA) – Overview (Updated Oct 2026)
- Cyber Resilience Act Single Reporting Platform (CRA-SRP) obligations for software companies selling globally
- Introduction to the Secure SDLC in the AI-Native world: the reality check
- ISA VDA 6.0.3 – The Data Protection sheet explained
- Why SSDLC is helping shipping faster and more secure code
- Security User Stories How-To – for product managers and developers
- ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance
- ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security
- ISA VDA 6.0.3 (part 3) — Information Security Sheet: Human Resources, Physical Security, Identity and Access Management
- ISA VDA 6.0.3 (part 2) — Information Security Sheet: IS Policies and Organization
EU Cyber Resilience Act (CRA) – Overview (Updated Oct 2026)
/in EducationalWhat is the Cyber Resilience Act – CRA The Cyber Resilience Act is the first European regulation to set a mandatory minimum level of cyber security for all connected products available on the EU market – something that did not exist before. The CRA is a regulation from the European Union — formally Regulation (EU) 2024/2847 […]
Cyber Resilience Act Single Reporting Platform (CRA-SRP) obligations for software companies selling globally
/in EducationalI wrote here about the CRA and the deployment plan: https://www.sorinmustaca.com/eu-cyber-resilience-act-cra-overview/ We are past September 11th and the Art. 14 of CRA is applying. Who is affected? Is a a company from a non EU country, which sells software globally affected by the CRA Art. 14? Any company is affected if the software is made […]
Introduction to the Secure SDLC in the AI-Native world: the reality check
/in EducationalIntroduction This is the very first article from a series of articles that will be merged with the existing SDLC Process “From Idea to Proof of Concept to MVP” previously written, finally to be rewritten in an AI-Native SDLC. What is an “AI-Native” organization? “AI-Native” describes an organization that has restructured how it works […]
ISA VDA 6.0.3 – The Data Protection sheet explained
/in EducationalThe Data Protection catalog is the shortest of the three in ISA 6.0.3 and the one most often underestimated. Twelve control questions across eight subchapters, all numbered under chapter 9. Compared to the roughly sixty questions in Information Security, it looks like an afterthought. It isn’t. It is the part of the assessment where an […]
Why SSDLC is helping shipping faster and more secure code
/in EducationalSoftware Delivered the Same Way Every Time Before security enters the picture, SDLC exists to solve a simpler problem: making software delivery repeatable. A team that builds features ad hoc, without a defined sequence of requirements, design, coding, testing, and release, ends up with wildly inconsistent outcomes — some releases solid, others full of regressions, […]