When does the reporting obligation under the EU Cyber Resilience Act (CRA) begin?

It begins on September 11, 2026.

What are the requirements for companies under CRA besides SBOM?

Companies are required to operate a vulnerability reporting portal, make prompt decisions and notifications regarding vulnerabilities, provide continuous updates, and establish an organizational structure that can reproduce these processes.

Who is the primary audience for this seminar?

The primary audience includes leaders in manufacturing, embedded devices, and software vendors with products for the European market, as well as those considering CRA compliance.

Why do many companies struggle with vulnerability management?

Many companies struggle with vulnerability management because they lack integration in identifying vulnerabilities, prioritizing them, and establishing an organizational response structure, leading to structural issues.

What can be gained from this seminar?

Participants can gain an understanding of the essence of CRA compliance, learn to integrate fragmented risk information, prioritize it, and take concrete first steps to continuously manage vulnerabilities as an organization.

Webinar: Moving Beyond SBOMs – Building Essential Vulnerability Response Capabilities

Published May 25, 2026 6:00 PM ・ Updated Jun 14, 2026 8:07 AM ・ 5 min read ・ Source: PR TIMES

Asterisk Research Inc. is hosting a webinar on the necessity of building organizational 'vulnerability response capabilities' beyond mere SBOM creation, in anticipation of the EU Cyber Resilience Act (CRA) enforcement in September 2026.

The 'Vulnerability Response Capability' Required Beyond SBOMs On September 11, 2026, reporting obligations under the EU Cyber Resilience Act (CRA) will commence. As of the time of this webinar, approximately 90 days remain. Many companies are rushing to prepare their Software Bill of Materials (SBOM).

However, the CRA demands more than just the submission of an SBOM. It requires: - Publishing and operating vulnerability reporting channels - Swift assessment and notification of exploited vulnerabilities - Continuous update capabilities - An organizational structure that makes these processes 'repeatable'

What is being scrutinized is not just whether you are aware of vulnerabilities, but whether you are in a state where you can continuously respond to them. The CRA essentially visualizes the quality fundamentally expected of software products. Today, there is a demand for a new organizational competence: 'vulnerability response capability.'

Stalling Due to Lack of Visibility and Assessment Many teams are facing significant hurdles: - Inability to fully identify where vulnerabilities exist - Difficulty in prioritizing findings - Inability to make release decisions - Vulnerability management relying on individual specialists rather than organizational processes

These are not merely technical or tooling issues but structural problems defined by an inability to grasp, assess, and execute. The industry is entering a domain where traditional diagnostic-centric approaches are no longer sufficient.

Rethinking Operations and Organizational Design Beyond SBOMs This webinar redefines CRA compliance through the lens of 'product quality capable of responding to changing threat environments even after shipment.' By dissecting why vulnerability management stalls and why organizational processes fail, the session explains the concepts of 'assessment' and 'operations' necessary beyond SBOMs.

- Target Audience: Manufacturers, embedded device providers, and software vendors with products for the European market. - Key Takeaways: Integrated risk management, setting priorities, and building sustainable operational frameworks.

Organizer: Asterisk Research Inc. Co-organizer: Majisemi Co., Ltd.

FACT BOX

Source: PR TIMES
Category: Event
Products / services: SBOM

Webinar: Moving Beyond SBOMs – Building Essential Vulnerability Response Capabilities

⚡ Key Points

FACT BOX

Editorial & Verification Standards

FAQ

Cite this article — HOW TO CITE

AI CRAWLER ACTIVITY