On 27th July 2026, the European Commission issued for the first time official guidance on how the CRA should be “interpreted and implemented”.
While some of the advice simply confirms what should be evident from the regulation, there is valuable clarification of items previously considered open to […]
This is a difficult question to answer, because while the CRA says (in Annex I Part I (2)):
On the basis of the cybersecurity risk assessment referred to in Article 13(2) and where applicable, products with digital elements shall:
(f) protect the integrity of stored … commands, programs and configuration…
…it doesn’t actually mention secure […]
On October 10th 2024 I was giving a talk on the CRA at the UK Engineering Design Show. I mentioned on a slide that it was possible that the CRA might be adopted by the Council on that day – and I was correct! Next, a few signatures […]
The EU Cyber Resilience Act (CRA) was voted through the EU Parliament in March 2024. All that’s now needed is EU Council assent in the coming weeks, and it becomes EU law.
Here are […]