本次 CRA 論壇主題為「CRA Standards First-Hand: From European Standards Development to Product Implementation and Conformity Assessment」，於活動中與會者將和 CRA 相關歐洲標準與政策專家直接對話，串聯標準進展、產品實作與符合性評估。在台灣的製造商們需要了解 CRA 不再只是單純的工程問題，更是攸關「歐盟市場准入」的企業生存戰略。
📢 活動相關資訊：
- 活動日期：2026 年 10 月 29 日 (四) / October 29th 2026 (Thursday)
- 活動時間：13:30 – 16:30 p.m.
- 活動地點：政大公企中心 / A1034 階梯型會議教室（106臺北市大安區永康里金華街187號） / No.187, Jinhua St., Da’an Dist., Taipei City 106304, Taiwan
- 公共交通抵達方式：
淡水線(紅線)/蘆洲線(橘線)→東門站3號出口，步行約6-8分鐘
新店線(綠線)/蘆洲線(橘線)→古亭站4號出口、5號出口，步行約12-15分鐘
👉 報名連結：立即點擊報名連結，為貴公司的核心研發團隊保留席位！
⚠️ 報名注意事項：本次論壇限定產品製造商參加，您的報名於資格審核通過後，會寄出 CRA FORUM 2026 報名成功通知信給您。感謝您的耐心等候。
📢 活動講者：
Lukasz Kister
歐盟執行委員會 (EC)
CRA 專家小組成員
Daniel Thompson-Yvetot
歐洲電信標準協會 (ETSI)
資安技術委員會特別報告員
SZ Lin
源鋼技術顧問有限公司
首席資安顧問
📢 活動與談者：
Mr. David Hsueh
Bureau Veritas Taiwan
Head of Cybersecurity Sales
資安驗證服務總監
Mr. Hans Gunneng Tømmerbakk
Nemko AS Taiwan Branch
Cyber Security Technical Manager
資安技術總監
📢 活動議程：
| 時間 | 主講者 | 議程 |
| 13:15–13:30 | Registration & Networking | |
| 13:30–13:40 |  SZ Lin 中文/現場 | Opening Remarks |
| 13:40–14:00 | SZ Lin 中文/現場 | 因應 CRA：常見誤解與製造商真正需要的產品資安能力 Preparing for CRA: Common Misconceptions and the Product Security Capabilities Manufacturers Actually Need |
| 14:10–14:30 |  Daniel Thompson-Yvetot 英文／現場 | 歐盟市場的軟體開發：從法規監管到工作實踐 Manufacturing European Software: From Regulation to Working Practice Summary: The Cyber Resilience Act (CRA) fundamentally changes what it means to ship PwDE to Europe. Manufacturers now carry obligations that reach from design and development through vulnerability handling and end of support. This talk walks through that shift using three connected books written from inside the standardisation process. This session walks you through this monumental shift, exploring the CRA’s essential requirements and emerging harmonized standards (M/606). We will trace how a software project becomes a regulated product and examine its impact on engineering culture, documentation, and supply chains. You will also learn the practical means of demonstrating conformity—including Modules A, B, C, and H, EUCC certification, and Notified Body assessments. Finally, we provide a complete methodology for the Default category, guiding you through self-assessment to a credible declaration of conformity. Attendees will leave with a clear, actionable roadmap bridging complex legal texts and daily engineering practice. |
| 14:30–15:00 |  Lukasz Kister 英文／線上 | CRA 協調標準：最新進展及產業應對策略準備 CRA Harmonized Standards: Current Development and What Industry Should Summary: The Cyber Resilience Act (CRA) is entering a critical implementation phase, with harmonized standards set to transform high-level regulatory requirements into concrete technical and process-based obligations. European Standardization Organizations (CEN, CENELEC, and ETSI) are currently developing more than 50 harmonized standards, including both horizontal standards that provide common compliance frameworks and product-specific standards for critical and important product categories. This session will provide an overview of the current state of CRA standardization activities, key milestones, and the expected publication timeline for the upcoming standards. It will explore how these standards are expected to support the presumption of conformity and what they will mean for manufacturers of hardware and software products. Special attention will be given to the evolving role of the IEC 62443 family, which is being adapted to support CRA compliance for many OT and ICS product categories. Attendees will gain practical insights into the actions organizations should take today to prepare for CRA compliance, including secure development lifecycle alignment, vulnerability handling processes, product readiness assessments, and conformity assessment strategies. The presentation will help industry stakeholders understand how to navigate the transition from regulatory expectations to operational implementation and maintain readiness as the CRA moves toward full applicability. |
| 15:15–15:30 | Coffee Break | |
| 15:30–16:30 |   與談者 Daniel Thompson-Yvetot Bureau Veritas Nemko SGS 中英文 / 現場 | Expert Panel Discussion 專家對談：從 CRA 要求到符合性評估，製造商需要準備什麼？ |
「不知道如何在團隊間轉譯 CRA 法規？讓 10月29日這場與 CRA 相關歐洲標準制定專家面對面的論壇，為您拆解從法規到 Working Practice 的具體路徑。」
👉 立即點擊報名連結，為貴公司的核心研發團隊保留珍貴席位！
⚠️ 報名注意事項：本次論壇限定產品製造商參加，您的報名於資格審核通過後，會寄出 CRA FORUM 2026 報名成功通知信給您。感謝您的耐心等候。
