IT Audit Factory · Evidence-first audit operationsFree · Professional · MSP
Products / Frameworks / 4.1.0

EU Cyber Resilience Act

Product-security inventory, vulnerability/incident timing, support-period, SBOM, lifecycle and conformity evidence.

This is the MSP 4.1.0 catalog snapshot, not the full publisher standard and not an assertion of Free/Professional parity. All conclusions require scope, adequate evidence and an authorized reviewer. This profile uses clause, family, criteria-group or locally authored readiness entries. It does not enumerate every official subcontrol or assessment objective.
6 catalog entries0 with exact test mappings6 family-support entries0 manual / unmapped

Control / requirementPackaged guidance & evidenceCoverage
EUCRA-01Product SecurityProduct-security inventory and product scope
Evidence and test details

Applicable supporting collectors: ADCS, ASSETREC, CERTTLS, ENTRA, NETWORK, VULN, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
EUCRA-02Product SecurityVulnerability handling and coordinated disclosure
Evidence and test details

Applicable supporting collectors: ADCS, ASSETREC, CERTTLS, ENTRA, NETWORK, VULN, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
EUCRA-03Product SecurityIncident/reporting timer workflow
Evidence and test details

Applicable supporting collectors: ADCS, ASSETREC, CERTTLS, ENTRA, NETWORK, VULN, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
EUCRA-04Product SecuritySupport period and lifecycle obligations
Evidence and test details

Applicable supporting collectors: ADCS, ASSETREC, CERTTLS, ENTRA, NETWORK, VULN, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
EUCRA-05Product SecuritySBOM and software-component linkage
Evidence and test details

Applicable supporting collectors: ADCS, ASSETREC, CERTTLS, ENTRA, NETWORK, VULN, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
EUCRA-06Product SecurityConformity/reporting evidence and immutable submission history
Evidence and test details

Applicable supporting collectors: ADCS, ASSETREC, CERTTLS, ENTRA, NETWORK, VULN, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope