In practice it is a downloadable spreadsheet: a company answers a set of questions about its own products and processes, the sheet turns those answers into a maturity score, and because it is reusable, the same company can rerun it every few months to see whether it is actually moving in the right direction rather than guessing. It is deliberately built around the realities of a smaller manufacturer - no dedicated security team, a tighter budget, dependence on components and software built by someone else - rather than assuming the resources of a large industrial group.

#ENISA #CyberResilienceAct #SMEs #SelfAssessment #Manufacturing