Public consultation on Commission guidance on the Cyber Resilience Act was launched today.

The draft aims to provide guidance on several outstanding issues, including:

• Free and open-source software
• Substantial modifications and spare parts
• Support period
• Important and critical products
• Cybersecurity risk assessment and integration of products and components
• Remote data processing

What this means for manufacturers

The guidance will shape how these open questions are interpreted in practice, so its final wording matters for anyone shipping products with digital elements. If your products fall in scope of the CRA, this consultation is an opportunity to flag interpretation issues that affect your products before the guidance is finalized.

For background, see Cyber Resilience Act: an Overview.