Sungrow has established a dedicated Cyber Resilience Act (CRA) readiness program and continuously monitors regulatory developments and implementation milestones.
Our ongoing efforts focus on:
Vulnerability Management and Reporting: Maintaining processes to support applicable cybersecurity vulnerability and incident handling obligations.
Secure Development: Integrating cybersecurity practices throughout product design, development, testing, and release activities.
Product Lifecycle Governance: Enhancing lifecycle management and product maintenance capabilities.
Software Supply Chain Security: Strengthening governance of software components and third-party dependencies.
Implementation Readiness: Advancing organizational and product readiness activities in line with the phased applicability of CRA requirements.
Sungrow will continue to enhance relevant processes and governance frameworks to support compliance with applicable CRA obligations as they become effective.
Continuously track and respond to compliance requirements at both EU and national levels, with a focus on:
NIS2 Directive: Sungrow Europe continuously assesses NIS2 requirements and strengthens regional governance, incident response, supply chain security and management accountability accordingly.
GDPR: GDPR requirements are embedded into regional privacy governance, operational processes and customer-facing data protection practices.
Product Cybersecurity: Product cybersecurity requirements are addressed throughout the product lifecycle, including secure development, vulnerability management, security updates and regulatory readiness.
Regulatory Tracking: We follow regulatory developments at both EU and national levels to keep regional governance and customer information up to date.
