A fact sheet on cyber security

Requirements and answers for secure IoT and embedded systems

Growing attacks on cyber security have made legislation necessary. According to a study by the digital association Bitkom e. V., the damage to the German economy in 2025 amounts to 289 billion euros. The EU has therefore issued a whole series of security regulations in recent years, among them the Digital Services Act and the Cyber Security Act.

As a specialist in electronic and software systems, we see it as our duty to protect embedded systems and cloud architectures against data theft and sabotage from development onwards.

We support our clients in meeting the EU requirements of the Cyber Resilience Act (CRA) and security requirements that go beyond them. Our processes are organised so that digital security is a fixed part of our services and our products.

Eight steps to a compliant product

Across the whole product life cycle we organise, together with our clients, the security requirements and the measures for meeting the CRA:

• product classification
• threat analysis and risk assessment
• cyber security by design
• technical documentation (see Annex I)
• putting a monitoring process in place
• conformity assessment
• CE conformity
• continuous vulnerability monitoring

Alongside product development we also take on the continuing, secure maintenance of embedded hardware and software systems as a service.

If you would like to know more about the requirements and the answers for secure IoT and embedded systems, you can request our fact sheet free of charge by e-mail. A short message to fs@querdenkerengineering.de is enough.