Events

Lunch & Learn: Understanding the Cyber Resilience Act and EU Funding Support

Agenda:

TimeSessionSpeaker
13:00–13:05Welcome and IntroductionKatia Bonello, MITA-NCC
13:05–13:20The Cyber Resilience Act: Understanding Your Obligations Explaining the CRA, its scope, key obligations and applicable deadlinesWarren Farrugia, MDIA
13:20–13:35SECURE Second Open Call: Funding to Support CRA Compliance Presenting the funding opportunity, eligibility, funding available and three-stage application processLucia Scialacqua, ACN
13:35–14:00Questions and AnswersOpen discussion – Moderated

The Cyber Resilience Act (CRA) introduces horizontal, EU-wide cybersecurity requirements for products with digital elements, including hardware and software products and their remote data processing solutions. It aims to ensure that such products are designed, developed, produced and maintained with cybersecurity in mind throughout their lifecycle, including through effective vulnerability handling and security updates.

The CRA entered into force on 10 December 2024 and will become fully applicable on 11 December 2027. However, certain obligations will apply earlier, including notification requirements for conformity assessment bodies from 11 June 2026 and reporting obligations from 11 September 2026.

This online information session will provide an overview of the CRA’s key requirements and obligations, while also introducing available EU funding opportunities to help micro, small and medium-sized enterprises (MSMEs) prepare for compliance.

Following a brief introduction by Katia Bonello from the National Cybersecurity Coordination Centre at MITA (MITA-NCC), Warren Farrugia from the Malta Digital Innovation Authority (MDIA),the CRA Competent Authority, will provide an overview of the Cyber Resilience Act, highlighting its scope, key requirements and implications for businesses placing products with digital elements on the EU market.

The session will then feature Lucia Scialacqua from the Agenzia Nazionale per la Cibersicurezza (ACN), who will present the SECURE project’s Second Open Call for funding. SECURE supports European MSMEs through financial assistance and guidance to strengthen their cybersecurity capabilities and meet the upcoming CRA requirements.

The second open call closes on 11 December 2026, with eligible EU SMEs able to apply for up to €30,000 in funding, covering 50% of eligible costs, to implement practical CRA compliance measures. These may include vulnerability management, secure development practices, governance and technical documentation.

The presentation will explain the application process, covering its three main stages:

  • Stage 1 – Application: How to prepare and submit an application.
  • Stage 2 – Evaluation: How applications are assessed and selected.
  • Stage 3 – Implementation: How selected beneficiaries can implement their proposed compliance measures.

The session will conclude with an opportunity for participants to raise questions and engage directly with the speakers.

Target Audience:

This Info Day is primarily aimed at Micro, Small and Medium-sized Enterprises (MSMEs), particularly those developing, manufacturing or distributing products with digital elements. The Social Entrepreneurs Association Malta (SEAM) is supporting the outreach to MSMEs, helping them understand their obligations under the Cyber Resilience Act (CRA) and explore available EU funding opportunities to support compliance.

This is an online event – please use this link to join the call: https://teams.microsoft.com/meet/339444664499944?p=AMgIbxHjNxsKbd1jHS