ISO/IEC 17025TUNAC 2-0155ILAC MRA
For most products with digital elements, the CRA allows self-assessment under Module A — no notified body required. We put you in a position to declare conformity yourself. Where a notified body is mandatory, we prepare your submission.
CRA Article 14
30
days until 11 September 2026
From that date, actively exploited vulnerabilities must be reported to ENISA within 24 hours — including for products already on the market.
The calendar
Six dates in EU law that decide when your product needs evidence. Each one links to the text itself.
In force
Member states had to bring the directive into national law. Essential and important entities owe risk management measures, incident reporting and supply chain security — and they pass those requirements to you as a supplier.
Directive (EU) 2022/2555
Read the regulation
In force
The first EU law to place cybersecurity requirements on products with digital elements across their whole lifecycle. The clock on every date below starts here.
Regulation (EU) 2024/2847
Read the regulation
In force
Network protection, personal data safeguards and fraud protection became mandatory for radio equipment. EN 18031 is the harmonised standard, and it is inside our accredited scope.
Delegated Regulation (EU) 2022/30
Read the regulation
Ahead
Actively exploited vulnerabilities and severe incidents must reach ENISA within 24 hours, with a fuller report at 72 hours and a final one at 14 days. It applies to products already on the market, which is why it lands before everything else.
Regulation (EU) 2024/2847, Art. 14
Read the regulation
Ahead
LMT batteries, industrial batteries above 2 kWh and EV batteries need a Digital Product Passport — the first DPP deadline fixed in law. Iron and steel, textiles, furniture and electronics follow.
Regulation (EU) 2023/1542, Art. 77
Read the regulation
Ahead
Conformity assessment, the CE mark and the technical documentation obligations all bite. A product without a conformity route by this date cannot be placed on the EU market.
Regulation (EU) 2024/2847
Read the regulation
Complete EN 18031 readiness assessment and gap analysis delivered in four weeks. Fixed budget, no hourly overruns.
EN 18031 · 4 weeks
CRA Article 14 preparation — PSIRT and ENISA workflow — coordinated between the European headquarters and the R&D team.
CRA Art. 14 · PSIRT
IEC 62443-4-2 pre-evaluation scoping. Defining the exact test requirements upfront at a fixed price reduced the final certification budget substantially.
IEC 62443 · Scoping
Services
Fixed price, not hourly.
Every service on this page is quoted as a fixed price with a binding delivery date, or as a monthly subscription. You get budget certainty; we are paid for the result rather than for hours on the clock. That is only possible because we automate heavily — and it is the reason we can support manufacturers for whom this level of help would otherwise be out of reach.
Impartiality
Where we have provided advisory or preparation services for a product, accredited testing of that same product is performed by an independent laboratory. This safeguards the impartiality required under ISO/IEC 17025 clause 4.1.
How we work
We come from ethical hacking, and we replicate the methods real attackers use — so the picture you get of your security maturity is the real one. The plan is built on what that finds.
Wave 1
We assess and evaluate the security of your systems, and simulate cyber-attacks to identify weaknesses and strengths alike. You get a complete risk assessment, a cyber health check, and the reports behind both.
Penetration testingRisk assessmentCyber health check
Wave 2
The implementation plan follows from what Wave 1 found: recommendations, a security plan, and the countermeasures actually put in place. Most breaches still come down to human error, so the programme also equips your people to recognise an attack aimed at them.
Security planCountermeasuresAwareness programme
Wave 3
Security does not end at implementation. We support the whole lifecycle afterwards — monitoring, incident management, and SOC and SIEM services — because the threat model keeps moving after the project closes.
MonitoringIncident managementSOC · SIEM
The third wave feeds the first. Threat models move after a project closes.
Long-term collaboration
We work alongside leading IT companies towards a safer international IT landscape. We work transparently, we respect the confidentiality of your data and information, and we are measured on the result rather than on hours.
The disciplines behind the three waves, and the standards we work against.
Industries
The Cyber Resilience Act applies across all of them — but it never applies alone.
AccreditedPLCs, drives, controllers and industrial gateways. Component- and system-level assessment against IEC 62443, including secure development evidence for your customers' supplier audits.
IEC 62443-4-1 · 4-2 · 3-3 · CRA
AccreditedBattery storage, power conversion systems, energy management systems and EV charging infrastructure. Connected energy assets fall under both the CRA and NIS2.
IEC 62443 · CRA · NIS2
AccreditedECUs, telematics units and connected vehicle components. TARA and ISO/SAE 21434 evidence in the form your OEM expects it.
ISO/SAE 21434 · UNECE R155 · TARA
AccreditedSmart home devices, wearables and wireless modules. RED Article 3.3 and CRA conformity for market access in the EU and the UK.
EN 18031 · ETSI EN 303 645 · UK PSTI
AdvisoryCybersecurity for core shipboard systems — navigation, propulsion, control. Excluding cargo and material handling systems. Equipment suppliers must produce the evidence.
IACS UR E26 / E27 · IEC 62443
AdvisoryEssential and important entities under NIS2: gap assessment, risk management measures, reporting readiness, supply chain security, and attack detection readiness under Section 31 BSIG.
NIS2 · § 31 BSIG · ISO 27001
Accredited — Testing under our ISO/IEC 17025 accreditation — TUNAC 2-0155, recognised internationally through the ILAC Mutual Recognition Arrangement. Advisory — Consulting and assessment outside the accredited scope. Where accredited testing is required for a product we have advised on, it is performed by an independent laboratory.
Accredited testing scope
Test reports issued by Teligencia Labs SARL are recognised internationally under the ILAC Mutual Recognition Arrangement. Accreditation valid until 2029.
Where we work
Our laboratory works from Tunis — the same time zone as central Europe. All accredited test reports are issued by Teligencia Labs SARL.
Teligencia Labs SARL, Immeuble Golden Tower, Bloc A, Centre Urbain Nord, 1082 Tunis. ISO/IEC 17025 accredited by TUNAC (2-0155, valid until 2029, ILAC MRA recognised). All accredited test reports are issued here.
ISO/IEC 17025AR · FR · EN
Safin Ilyas, Chief Sales Officer. Point of contact for European clients: project scoping, commercial terms and delivery coordination. Works in German and English, in the Central European time zone. safin.ilyas@teligencia.com
DE · ENDACH · EU
Teligencia South Africa (Pty) Ltd, 425B Olive Bee Eater Crescent, Heron Hill Garden Estate, Pretoria, Gauteng 0181. Regional office extending our cybersecurity services to clients across Southern Africa. Makibinyane Mohapeloa, Managing Director.
ENSouthern Africa
Market access
EU regulation is becoming the global standard. Every manufacturer in Africa and the MENA region selling into Europe will need conformity evidence — for the CRA, for the product passport, and for what comes after. The testing infrastructure to produce that evidence barely exists on the continent.
Ours does. Teligencia Labs SARL is accredited to ISO/IEC 17025 by TUNAC and recognised internationally through the ILAC Mutual Recognition Arrangement. A report issued in Tunis is accepted in Europe.
Testing in Tunis, recognised in Europe under the ILAC MRA. No shipping products to a European laboratory and waiting in its queue.
In Arabic, French and English, in your time zone, by people who work against European requirements every week.
We assess against the EU requirement and produce the evidence in the form your European buyer or the authority expects — not a local report that then has to be redone.
Leadership
Our leadership is supported by a network of analysts, engineers and compliance specialists working to ISO/IEC 17025 procedures.
Chairman of the Scientific Board
Professor of IT Security, DBU Berlin · PhD, Northumbria University Newcastle · MBA
Provides scientific oversight for our cybersecurity laboratory — accredited by TUNAC (2-0155), recognised internationally through the ILAC Mutual Recognition Arrangement. Over two decades in senior technical and commercial roles at global industrial OEMs. Expert in standards-aligned security assurance for industry and government.
DBU BerlinNorthumbria UniversityTUNAC 2-0155ILAC MRA
Chief Sales Officer
Strategic partnerships & compliance advisory
Translates complex regulatory requirements into structured delivery models — from ongoing compliance programmes to public-sector framework agreements. Holds three Master's degrees. Currently completing CISM (ISACA) and AI Officer ISO/IEC 42001 certifications.
ISACA CISMCompTIA Security+ISO/IEC 42001
Managing Director
BCom · Postgraduate Diploma in Corporate Governance · Global Executive MBA (IESE)
Founder of Tshokoma Training and Consulting and Chief Operating Officer of MzansiSat. Serves on South Africa's B-BBEE ICT Council and as a non-executive director at Liselo Labs, bringing a background in investment, corporate governance and public-sector engagement across the continent.
MzansiSatB-BBEE ICT CouncilIESE
Applied research
Our work is grounded in academic research. Prof. Dr. Aymen Gatri holds a professorship in IT Security at DBU Berlin, and our research feeds into how we assess emerging technologies — before the standards catch up.
Cryptographic agility in constrained industrial devices. How do embedded systems with 10- to 20-year lifecycles migrate to post-quantum algorithms — and what does "harvest now, decrypt later" mean for products shipping today?
Security assessment of AI-enabled components: adversarial robustness, model integrity, and the intersection of the EU AI Act with existing product security requirements.
Machine-readable software bills of materials across multi-tier supply chains: what the CRA requires, what current tooling delivers, and where the gap between the two lies.
DBU Cyber Month
Click to load — YouTube sets cookies
ISO/IEC 17025-based automated workflows, evidence analytics, and EN 18031 readiness for the Radio Equipment Directive.
Follow on LinkedInEight questions, an indicative result, no cost. Fixed price and a binding delivery date if you take it further.
