Will CRA Solve the Supply Chain Security or Create a Procurement Maze? An Assessment from an Industry Perspective (R20c)
The CRA aims to encompass all connectable products and their hardware and software components, delivering enhanced security and transparency across the supply chain. However, the complexity of managing tailor-made software components, FOSS, and hardware far upstream introduces significant compliance and integration challenges. This talk analyzes these issues from an industrial perspective, focusing on their implications for product risk assessment and timely compliance.