Cyber Resilience Act Readiness Statement
CIMCO A/S complies with the applicable requirements of Regulation (EU) 2024/2847, the European Union Cyber Resilience Act (CRA).
This statement provides general information about CIMCO’s implementation of the CRA and applies to software products developed and placed on the market under the CIMCO name.
Product Classification and Conformity Assessment
CIMCO software products fall within the CRA default product category.
CIMCO uses the internal control procedure under Module A, also referred to as self-assessment, to assess and document conformity with the applicable cybersecurity requirements of the CRA.
Technical Documentation and CE Marking
CIMCO is completing the required product-specific technical documentation, conformity documentation and supporting cybersecurity documentation.
The required technical documentation, EU Declarations of Conformity and CE marking will be in place no later than 11 December 2027, when the main product requirements of the CRA become applicable.
Reporting a Security Vulnerability
CIMCO complies with the CRA reporting obligations applicable from 11 September 2026 and maintains a dedicated security reporting channel and an internal procedure for assessing, escalating and reporting security vulnerabilities and incidents.
If you have discovered a potential security vulnerability in any CIMCO software product, please report it to:
To help us investigate, please include:
- Product name
- Ausführung
- Description of the issue
- Steps to reproduce the issue
- Any relevant technical details that may help CIMCO investigate
.
