The EU’s Cyber Resilience Act (CRA) introduces binding cybersecurity rules for digital products, with the first reporting deadlines for serious incidents and vulnerabilities set for September 2026. Full compliance is required by December 2027, marking a shift from cybersecurity as an IT issue to a verifiable product characteristic under Regulation (EU) 2024/2847. (EENEWS EUROPE)
Cyber Resilience Act, Part 1: The first deadlines are approaching
With the Cyber Resilience Act (CRA), or Regulation (EU) 2024/2847, the EU is establishing a binding legal framework for the cybersecurity of products with digital elements for the first time. For manufacturers, importers, and distributors, this represents a fundamental shift: cybersecurity will no longer be merely an IT issue but a verifiable product characteristic – comparable to functional safety, EMC (Electromagnetic Compatibility), or electrical safety.
Subscribe to our newsletter
Subscribe to our newsletter to get the latest updates and news
