Manage SBOMs to Comply with The Cyber Resilience Act (CRA)? What Does That Mean? How Do We Do That?

In September 2026, the Cyber Resilience Act (CRA) introduced new cybersecurity requirements for products with digital elements sold in the European Union, so organizations must move beyond static SBOMs and point-in-time compliance. The challenge is creating continuous visibility into software components, vulnerabilities, dependencies, lifecycle status, and supply-chain risk. On September 23, 2026, Eracent and featured SBOM-HQ customer Sopra Steria held a webinar that was a practical discussion on how you can operationalize CRA compliance and transform your SBOMs into living, continuously monitored sources of security intelligence. This session - titled "How Sopra Steria Targets CRA Compliance and Digital Asset Visibility with Eracent's SBOM-HQ™" - explored the key requirements and challenges of the CRA, Sopra Steria’s approach to addressing them, and how Eracent’s SBOM-HQ centralizes and enriches SBOMs with vulnerability, lifecycle, product, and open-source intelligence, enabling deep analysis and reporting for software developers and consumers. The webinar included a case-based demonstration of how organizations can move from an application to its individual components, identify vulnerabilities and risk, understand business impact, and maintain the documentation and intelligence needed to support ongoing CRA compliance.