Security & Privacy
EU Cyber Resilience Act (CRA)
2024ActivePublished
Key
innovation
Mandatory, horizontal cybersecurity requirements for digital products in the EU across their whole lifecycle.
Category
Security & Privacy
Abstraction level
Pattern
Operation level
DeploymentSystem
How it works
The CRA establishes essential cybersecurity requirements and manufacturer obligations (secure design, vulnerability management, updates, documentation, incident reporting). Conformity is indicated by CE marking; market surveillance can enforce the rules, and violations carry penalties.
Problem solved
Many digital products reached the EU market without adequate security and without an obligation to provide updates, creating systemic cybersecurity risk.