CRA Scoping Estimator — Porta Regulus

Scoping Parameters

Select product context and available evidentiary artifacts.

Product Category

Number of Product Families (SKUs)

Available Compliance Artifacts

Check the documents currently available in your technical file. Missing documents will automatically be scoped for creation.

Product Context & Architecture Use cases, operational environment, and high-level architectural diagrams.

Threat Model & Risk Assessment Documented asset lists, identified threats, risk estimations, and risk treatments.

SBOM & 3rd-Party Agreements (CSSA) Software Bill of Materials and documented agreements with upstream suppliers.

V&V / Cybersecurity Test Reports Recent penetration tests, fuzzing results, or automated vulnerability scans.

Vulnerability Handling Policy Documented Coordinated Vulnerability Disclosure (CVD) and patching workflows.

User Manuals & Decommissioning Clear instructions for secure setup, configuration, and secure data wiping.

Vulnerability Reporting Infrastructure

Coordinated Vulnerability Disclosure (CVD) & ENISA Reporting We already have an active portal for researchers and an automated workflow for 24h/72h ENISA notification.

Statement of Work Preview

Resource and cost estimation based on selected controls.

Analyzing Compliance Gaps...

Processing artifacts and calculating required work packages.

Estimated Investment

€0

Estimated Timeline

0 Weeks

Required Work Packages

Enter your details and we'll send this scoping estimate directly to your inbox.