Product cybersecurity · EU regulations
getcsready.com is the product cybersecurity hub of TTK — Trygg Teknik Konsult, bringing together engineering support and regulation-specific kit portals for manufacturers of connected products, machinery and vehicles.
Practical support for the Cyber Resilience Act, the Machinery Regulation and vehicle cybersecurity.
Regulations and standards we work with
What we do
Most of the work is the same whatever the regulation: know what you are building, decide what could go wrong, show what you did about it, and keep doing it after release.
A threat and risk assessment your engineers can maintain, tied to the requirements you have to meet.
A technical file an assessor can follow from requirement to evidence without a guided tour.
Intake, triage and disclosure, plus the Article 14 reporting steps of the CRA, which have applied since 11 September 2026.
Security activities placed in the development process you already run, not in a parallel one.
What to ask suppliers for, how to keep a component list current, and what to do when one of them has a flaw.
The same approach for UNECE R155 and R156, ISO/SAE 21434 and IEC 62443 work.
Approach
Four steps, each ending in something you can show. You can start at any of them.
Which regulations apply to the product, in which role and from which date. One page, with the articles cited.
Threat and risk assessment on the real architecture, with each requirement traced back to the regulation.
The technical file, test evidence and declarations that an assessor or a market surveillance authority will ask for.
Vulnerability handling, reporting and updates for the support period, so the file stays true after release.
Kits
Each kit has editable templates, a plain-language guide for every module and a fully worked example product, so you can see what a finished entry looks like before you write your own.
For manufacturers of products with digital elements under Regulation (EU) 2024/2847.
For machinery manufacturers preparing for the cybersecurity requirements of Regulation (EU) 2023/1230, which applies from 20 January 2027.
About
TTK is a product cybersecurity practice led by Özer Koray Akdemir, a security engineer with more than twenty years in embedded systems, cryptography and product security.
He has led a product cybersecurity function through a regulatory type-approval audit and presented the evidence to the assessor himself.
More about TTKEvery recommendation ends in a document, a test or a requirement you can show.
Security work that fits the way your teams already build products.
Clear sentences and cited articles. No jargon to hide behind.
Describe the product and the regulation you are working towards. You will get a reply from the engineer, not from a sales team.
