--- title: "Cyber Resilience Act — readiness check | logiccloud" description: "Reporting duties have applied since 11 September 2026. Find out where your machines stand: readiness check, gap report and a plan to close the gaps." url: https://logiccloud.com/en/cra/ language: en-GB --- CRA knowledge center # Is your machine ready for the Cyber Resilience Act? Implement CRA requirements systematically — instead of rethinking every machine. The Cyber Resilience Act gives machine builders new obligations: security updates must be provided across the product lifecycle, vulnerabilities managed and software versions documented traceably. The clock is running — reporting obligations for actively exploited vulnerabilities have applied since 11 September 2026, full applicability from 11 December 2027. logiccloud provides the technological basis: manage your machines centrally, distribute security updates in a controlled way and keep track, at any time, of which software runs on which machine. A regulatory requirement becomes a manageable process — from the first device to thousands of connected machines and plants. [Request a CRA assessment](https://logiccloud.com/en/contact/) [Get the CRA checklist](https://logiccloud.com/en/cra/checklist/) The CRA readiness check ## Do you know where you stand on the CRA? Find the gaps before they become a problem. For connected machines it will no longer be enough to consider security only during development — manufacturers must organise and traceably document security measures across the entire product lifecycle. Can you already … - ### Distribute security updates to machines in the field? - ### Tell which software version runs on which machine? - ### Manage machines and edge systems centrally? - ### Document changes and access traceably? - ### Manage users, roles and permissions centrally? - ### Roll updates out in a controlled way and roll them back on problems? If you cannot clearly answer yes to every question, there is work to do. That is exactly where the logiccloud CRA assessment starts. Your path to CRA readiness ## From the first check to implementation. 1. 1 CRA check Answer the readiness questions and identify where action is needed. 2. 2 Assessment Review your machine, software architecture and processes from a technical CRA perspective. 3. 3 Gap report Transparency about existing capabilities and possible gaps. 4. 4 Action plan Prioritised fields of action for your machines and your installed base. 5. 5 Implementation Implement the requirements technically with CONTROL and ORCHESTRATE. Understand the CRA. Identify the gaps. Prioritise the measures. The CRA assessment ## From “What do we have to do?” to a concrete action plan. Together we review your machine, software architecture and existing processes from a technical CRA perspective. We identify existing capabilities, possible gaps and areas where technical or organisational measures are required. You receive: - ### Transparency about where you stand You see which technical prerequisites are already in place and where action is needed. - ### Prioritised fields of action Instead of a generic CRA checklist, you get concrete starting points for your machines and your installed base. - ### Technical solution approaches We show which requirements can be met with your existing architecture and where logiccloud can support you. - ### A basis for the implementation ahead The assessment produces a structured starting point for your CRA roadmap. [Check your CRA readiness](https://logiccloud.com/en/contact/) The platform ## Security and compliance become part of the machine lifecycle. Not retrofitted — designed in from the start. logiccloud combines the functions needed for secure software operation in one shared platform. - ### Distribute updates securely Provide software and security updates centrally and roll them out to machines in the field in a controlled way. Your benefit: fewer on-site visits and a reproducible update process. [ORCHESTRATE](https://logiccloud.com/en/products/orchestrate/) - ### Know your software versions at any time Every runtime is based on a versioned build — traceable which version runs on which machine. Your benefit: transparency across the entire installed base. - ### Manage machines centrally Register, manage and monitor connected machines and edge systems centrally. Your benefit: one central overview — from a single device to thousands of machines and plants. - ### Make changes traceable Changes and access are logged and can be analysed and exported. Your benefit: evidence builds up during operation — not shortly before an audit. - ### Control access Manage users, roles and permissions centrally and restrict access deliberately. Your benefit: only authorised people get access to machines and functions. - ### Roll updates out under control Distribute new software versions step by step and roll back to a defined state on problems. Your benefit: security updates go from operational risk to controlled process. logiccloud ORCHESTRATE · machine X200 CRA Provable in the field - Which software runs on which machine inventory - Vulnerability scan (premium module) 2 findings - Fixed version built and released 4.8.1 - Update rolled out in stages canary → all - Every change recorded audit log, CSV export CRA conformity of the overall product remains the manufacturer’s responsibility. Illustrative example — names and values are made up. Your machines in the field ## The CRA does not end at delivery Most CRA content explains the law or assures you that the vendor’s own products comply. The real work for machine builders starts afterwards: machines already at customers need security updates for the whole support period — with evidence. With logiccloud ORCHESTRATE you know which software runs on which machine, roll out fixed versions in stages and have every change in the audit log. [Software updates in the field](https://logiccloud.com/en/solutions/field-software-updates/) ## Further reading - [CRA reporting duty: 24 hours from awareness](https://logiccloud.com/en/cra-reporting-duty-24-hours-from-awareness/) - [Missed NIS2? What machine builders must catch up on](https://logiccloud.com/en/nis2-missed-what-machine-builders-must-catch-up-on/) - [Margo before the first release: what machine builders get out of it](https://logiccloud.com/en/margo-before-the-first-release/) ## From one machine to thousands — with the same processes. The real challenge begins after delivery: machines run for many years at different customers and different sites. At the same time, software versions must be maintained, security updates distributed and changes documented traceably. logiccloud ORCHESTRATE turns that into one centrally controllable lifecycle: a process for one machine becomes a standardised process for hundreds or thousands of machines and plants — less manual effort, less on-site service, more transparency, controlled updates, traceable processes. ### Do not just satisfy the CRA. Modernise the machine lifecycle. The Cyber Resilience Act creates new requirements — and at the same time gives machine builders the chance to fundamentally modernise their software and service processes. With logiccloud you build an infrastructure through which machines can be securely managed, updated and evolved after delivery. CRA readiness stops being an isolated compliance project — it becomes part of a modern, software-defined machine architecture. Note: CRA conformity of the end product remains the responsibility of its manufacturer. logiccloud provides technical functions and processes that support the implementation. The information on this page is not legal advice. ## Do you know where your machines stand today? The logiccloud CRA assessment gives you a structured overview of your current technical state, possible gaps and the sensible next steps. [Request a CRA assessment](https://logiccloud.com/en/contact/) [Get the CRA checklist](https://logiccloud.com/en/cra/checklist/)