# 给 SMELA 的 CRA 合规询证清单（英文 · 可直接发送）

针对德国大众 CRA 问卷 ｜ 电缸型号：liteECO® INTEGRATED series ｜ 用于 Magswitch 夹紧缸

为什么必须找 SMELA：CRA（欧盟《网络弹性法案》(EU) 2024/2847）的合规证据源头在含数字元素产品的制造商。 你们（Magswitch）把 SMELA 电缸集成进夹紧缸，但固件、通信协议栈、漏洞管理、安全更新等证据都在 SMELA 手里。 大众要的 CRA 答案，最终需要 SMELA 出具以下文件。

## 一、可直接发送的英文询证邮件

复制下面整段，填入你的公司信息、联系人、采购型号后发送到 `sales@smela.com` 与 `info@smela.com`。

Subject: Request for EU Cyber Resilience Act (CRA) Compliance Documentation — liteECO® INTEGRATED Series Dear SMELA Sales / Technical Support Team, We are a supplier to Volkswagen Group and currently use your liteECO® INTEGRATED series linear actuators (integrated motion controller, EtherCAT / CANopen / digital IO variants) in our clamping cylinders for automotive body-in-white applications. Volkswagen has issued a component compliance questionnaire under the EU Cyber Resilience Act (CRA) (EU) 2024/2847 and the EU Machinery Regulation (MVO) (EU) 2023/1230, together with IEC 62443-4 security levels. To complete this declaration for our integrated product, we kindly request the following documentation and information for the liteECO® INTEGRATED series: 1. CRA applicability & classification – Confirmation whether the liteECO® INTEGRATED actuator is a "product with digital elements" under CRA Article 3. – Its CRA classification (default / important / critical) per CRA Annex and Articles 7 & 8. 2. Software Bill of Materials (SBOM) – SBOM listing firmware and software components (incl. EtherCAT CoE / CiA402 / IEC 61800-7-301 and CANopen CiA 301/305/402 stacks) as required under CRA Annex I. 3. Vulnerability management & security updates – Confirmation of a vulnerability handling process (e.g., ISO/IEC 30111 / 29147). – Security update support period (e.g., "security updates provided until 20XX-XX") and how updates are distributed to customers. 4. IEC 62443-4 security level – The applicable Security Level (SL 1–4) under IEC 62443-4-2 for the actuator, if assessed. 5. EU Declaration of Conformity – EU Declaration of Conformity for the Machinery Regulation (EU) 2023/1230 and, once available, for the CRA (EU) 2024/2847. – CE marking status and conformity assessment procedure used (self-assessment or notified body). 6. Technical documentation – Assembly/incorporation instructions (Einbauerklärung / assembly declaration) for integrating the actuator into our clamping cylinder. – Any product security guidance or hardening recommendations. Since Volkswagen requires a response with a defined timeline, we would appreciate receiving the available documents, or a written statement of planned availability dates, by [INSERT DATE]. Thank you very much for your support. Please let us know if you need our specific part numbers or purchase records. Best regards, [Your Name] [Your Company — Magswitch Technology Europe] [Your Email / Phone] [Relevant part numbers / order references]

## 二、所需文件逐项清单（中文说明 + 英文术语）

# | 所需文件/信息 | 英文术语 | 对应 CRA 问卷哪一列 | 优先级
--- | --- | --- | --- | ---
1 | CRA 适用性 & 分级确认 | CRA applicability & classification (default/important/critical) | J / M | 最高
2 | 软件物料清单 SBOM | Software Bill of Materials (SBOM) | Q（交付时 CRA 能力） | 最高
3 | 漏洞管理流程 + 安全更新期限 | Vulnerability handling + security update period | O（安全更新至…） | 最高
4 | IEC 62443-4 安全等级 | IEC 62443-4-2 Security Level (SL1–4) | N（等级1–4） | 高
5 | 欧盟符合性声明（MVO + CRA） | EU Declaration of Conformity (MVO & CRA) | K（已满足？） | 最高
6 | CE 标志状态 + 评估程序 | CE marking & conformity assessment procedure | K / L | 高
7 | 半成品机械组装说明 | Assembly declaration (Einbauerklärung) | K（MVO 合规） | 高
8 | 产品安全指南/加固建议 | Product security guidance / hardening | 备注 | 中

## 三、内部提示（给 Magswitch 自己看，不发给 SMELA）

- 时间线要紧：大众要"带时间承诺"的答复，邮件里务必写 `by [DATE]`，别发开放式问题。
- 准备好采购证据：SMELA 可能只对正式客户出具 SBOM/合规文件，附上你们的型号、采购订单号可加快。
- CRA 生效时间：CRA (EU) 2024/2847 已于 2024 年 12 月生效，义务从 2027 年起分阶段适用（重要/关键产品更早）。确认 SMELA 的合规路线图与大众要求的时间是否匹配。
- MVO 已强制：欧盟机械法规 (EU) 2023/1230 已适用，CE 声明是硬性要求，优先要。
- 分级是关键变量：若 SMELA 说产品是"default（一般）"级，CRA 义务较轻（自我评估为主）；若是"important（重要）"级，需更严的评估程序。先问清分级，再决定应答强度。

## 四、跟进话术（SMELA 迟迟不回时）

Follow-up: Dear SMELA Team, following up on our previous request regarding CRA documentation for the liteECO® INTEGRATED series. Our Volkswagen deadline is approaching and any partial information — such as the CRA classification or the planned SBOM availability date — would already help us complete our declaration. Thank you.