Cybersecurity and standardization expert
Articles
CRA Standardization Request: Deadlines Extended
The Commission has amended standardization request M/606, extending deadlines for risk-based product security, vulnerability handling, and product-specific CRA standards.
Introducing the CRA Standards Tracker
A new page on this site tracks where each harmonized standard for the EU Cyber Resilience Act stands, from drafting to citation in the Official Journal.
EN 40000-1-2: CRA Process Standard Approved
EN 40000-1-2, the horizontal Cyber Resilience Act process standard covering cybersecurity principles, product risk management, and lifecycle activities, has been approved by the CEN-CENELEC formal vote with 100 percent of votes in favor.
CRA Guidance: Public Consultation Closed
The European Commission's consultation on draft CRA guidance ran from March 3 to April 13, 2026. The Commission published the guidance on July 27, 2026 (C(2026) 5252).
RED Delegated Act: Repeal Takes Effect in December 2027
Delegated Regulation (EU) 2026/339 repeals the RED cybersecurity Delegated Act from December 11, 2027. Earlier equipment remains subject to surveillance of the requirements that applied when it was placed on the market.
Webinar | CRA: The Manufacturer's Perspective
Past webinar: an overview of Cyber Resilience Act requirements from the manufacturer's perspective, held with The Lighting Industry Association on February 3, 2026.
Cyber Resilience Act: Reporting Obligations
CRA reporting obligations from September 11, 2026: what to report, the 24-hour and 72-hour notifications, and the different final-report deadlines for vulnerabilities and severe incidents.
RED Delegated Act vs Cyber Resilience Act
RED Delegated Act vs Cyber Resilience Act: differences in scope, protected assets, process requirements, and product assessment, and what the transition means for manufacturers of connected products.
Cyber Resilience Act: an Overview
What the EU Cyber Resilience Act requires of products with digital elements: scope, product classes, conformity assessment, and manufacturer obligations, explained from a manufacturer's perspective.
