Cyber Resilience Act

Role-play background

You are the Security Champion of your development team in a large multinational company headquartered in Denmark. As a Security Champion, part of your responsibility is to bridge the gap between the company’s security team and your own development team. The security team are pushing you to get your development team to complies with cybersecurity requirements from CRA.

However, whenever you raise these concerns during daily SCRUM or sprint planning, your teammates are quick to dismiss them. Some common arguments include:

• “We can’t afford to waste time with that now, we need to deliver X feature by the end of this sprint”
• “customers pays for features, not for whatever the security team comes up with”.

You are becoming frustrated by the situation, so you decide to take action. The plan is to meet with the security champions from the other development teams and plan a campaign to raise awareness.

Task

• Form a group (up to 4 students).
• Design material for CRA requirements awareness campaign aimed at developers.
  • It could be website, poster etc.
  • Be creative!
• You don’t have to cover all of CRA. Instead, you can go deeper into some requirements if you want.
• Include suitable infographics.
  • It is not expected that magically transform into a graphic designer.
  • Focus on clarity and usefulness, not perfection.

Guidelines

• You likely need to conduct additional research beyond what’s covered in the material this week.
• Copy-pasting from ChatGPT or other sources is not enough.

Deliverables

Submit the material produced with a short description of the thought process behind. The description should be less than 1 page.