Cyber Gangsta’s Paradise: Music Video Draws Attention to the Cyber Resilience Act

Digital product security is becoming a legal obligation. Under the new security standard for connected devices, manufacturers operating in the EU must comply with the Cyber Resilience Act (CRA) no later than 11 December 2027. To draw attention to this, Dominik Merli, Professor of IT Security at Augsburg University of Applied Sciences, has released a song titled Cyber Gangsta’s Paradise, bringing cybersecurity to the ears: “Cybersecurity is boring and annoying? I disagree. Cybersecurity needs creativity! Security must get into everyone’s head – even if it has to be through a catchy tune.”

A Lack of Cybersecurity Awareness

The song Cyber Gangsta’s Paradise is intended to highlight the minimum cybersecurity standards required for connected products. Merli explains: “There are more and more devices and products interconnected via the Internet of Things, both in everyday life and in business environments. These so-called IoT devices are increasingly affected by cyberattacks. Unfortunately, awareness of cybersecurity is still lacking far too often. The song depicts these ‘paradisiacal’ conditions on which cybercriminals build their lucrative business models, thereby endangering both product manufacturers and consumers alike.”

The music video is part of a broader awareness and information campaign on the Cyber Resilience Act, which has been running since autumn 2024. Using the hashtag #CRAmitINNOS, Merli has been sharing updates on LinkedIn twice a week about the CRA. A blog providing current information on the CRA has also been launched on the website of the Institute for Innovative Security at Augsburg University of Applied Sciences.

Making the Requirements Understandable

Merli adds: “Over the course of the year, it became clear that the Cyber Resilience Act would have significant implications for the development of modern products. My team and I have therefore prepared the most important information in a way that’s easy to understand and specifically tailored to product manufacturers – using charts, diagrams and plain language. Our aim was to make it as easy as possible for manufacturers to understand the requirements and introduce appropriate security measures.”

With the release of Cyber Gangsta’s Paradise, Merli also launched his YouTube channel, through which the IT security expert hopes to reach a wider audience. The channel already features a series on the Cyber Resilience Act. Merli on the CRA: “The legislation is complex. The required measures are extensive. And the time available is short. That’s why manufacturers should act quickly and not keep putting off the implementation of the CRA.” More videos on the secure development of products are planned for the channel in the future, offering clear explanations to help businesses more easily integrate security into their products and systems.