The CRA Compliance Glossary

Understanding the Cyber Resilience Act (CRA) starts with understanding its language and that language isn't always easy to navigate. Legal terminology, technical acronyms, and compliance concepts are scattered across the regulation and its supporting standards, often without a clear, accessible explanation in one place.

To close that gap, CRACoWi partners have developed the CRA Compliance Glossary, now available as a new resource on the CRAcademy hub. Built as part of CRAcademy's mission to provide clear and practical information about the CRA (through FAQs, blogs, expert insights, and more), the glossary is designed to be your quick reference whenever CRA terminology gets in the way of getting things done.

What`s inside?

The glossary brings together plain-language definitions of the terms, acronyms, and concepts that come up throughout the CRA compliance journey - from foundational security properties like confidentiality, integrity, and availability, to CRA-specific mechanisms such as the Declaration of Conformity, CE marking, and conformity assessment routes. It also covers the technical vocabulary manufacturers and product teams encounter in practice: SBOMs, SAST/DAST testing, threat modelling frameworks like STRIDE, vulnerability disclosure policies, and more.

Each entry is written to be understood without a legal or cybersecurity background, while staying precise enough to be useful for teams already deep in their compliance work.

For those who prefer to save, print, or share the glossary offline, a PDF version of the CRA Compliance Glossary has been published.

Part of a growing CRAcademy toolkit

The glossary joins the CRAcademy webinar series and other capacity-building resources already available on the platform, reinforcing CRACoWi's broader goal: helping SMEs, manufacturers, distributors, and importers meet new cybersecurity standards throughout the product lifecycle.

Explore the CRA Compliance Glossary on CRAcademy: cracowi.eu/cracademy/cra-compliance-glossary