Readiness
Preparation is half the battle.
Sooner or later it gets serious: the statutory reporting obligation kicks in, the assessment is in the calendar, or management asks why the AI rollout hasn’t delivered anything yet. What counts then is not what the process handbook says, but what actually works on Monday morning. Anyone who starts only then ends up hunting for owners, templates and evidence under time pressure – and that gets expensive.
What “Readiness” means to us
“Readiness” means that processes, the required evidence and teams are well prepared for the next challenge: be it new legislation, new standards, assessments or the use of AI.
When the time comes, will everything run smoothly?
This is a different dimension from process improvement: process improvement is about using strategic potential – readiness means being ready when it matters.
We have taken part in a double-digit number of assessments (CMMI and Automotive SPICE) and celebrated their successful completion.
Focus 1: Cyber Resilience Act (CRA)
The Cyber Resilience Act is relevant for manufacturers of products with digital elements. Since 11 September 2026 the reporting obligations apply: for actively exploited vulnerabilities and severe security incidents, an early warning is due within 24 hours and the notification within 72 hours, each counted from awareness. The remaining obligations apply from 11 December 2027.
The starting point is the reporting drill (usually one day, fixed price on request): together with your team we play through a fictitious case tailored to your product and check whether the reporting chain holds on any given day – weekends included.
- All about the CRA and our three steps
- CRA self-check (in German): a first assessment in your browser, nothing is stored
Our support covers technology, processes and evidence, but neither legal advice nor the conformity assessment itself. That lies with the manufacturer or, depending on the product class, with a notified body.
Focus 2: Processes and AI – in preparation
AI gets introduced fast but is rarely thought through. We design processes so that AI pitches in where it takes real work off your team, and stays out where judgement is needed. With clear responsibilities and traceable results. This offering is in preparation.
Focus 3: Assessment readiness (e.g. Automotive SPICE) – in preparation
An assessment should never come as a surprise. Whether the team is ready can be clarified beforehand, not only when the first work products are requested. We are planning an ASPICE Readiness Call: a short, honest look at where you stand before the assessment and what can realistically be achieved by then.
Focus 4: Project efficiency
A project can comply with every process and still fail to deliver. We look at where things get stuck – responsibilities, handovers and decisions – and what is slowing the team down before the customer notices. The CORE SPICE Project Pain Check (about 10 minutes) gives you a first assessment.
Check first, then call.
Start with the matching check, such as the CRA self-check or the CORE SPICE Pain Check. Then let’s talk. The Diagnostic Call is free of charge, takes about 30 minutes and is confidential. You describe the situation, we ask the questions we would ask at the start of an engagement. Afterwards you have an independent assessment of where you stand.
We work as freelancers or on interim assignments.