Why This Date Matters to You Mark your calendar: 11 September 2026. On this date, the first mandatory obligation under the EU’s Cyber Resilience Act (CRA) goes live. From that day, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe security incidents to EU authorities. This is not a distant deadline…
Looking at Trustworthy Boot Design for Routers and Switches through ETSI EN 304 627 AC-INTEGRITY-1-02 As the EU Cyber Resilience Act (CRA) gradually enters the technical standard implementation phase, manufacturers of routers, Internet-connected modems, and switches need to re-examine their designs for Secure Boot, Firmware Integrity, and Root of Trust. ETSI is currently drafting EN…
The European Union Agency for Cybersecurity (ENISA) has released the SME Cyber Resilience Maturity Assessment Model, together with an Excel-based self-assessment tool designed to help companies understand their current level of product cybersecurity maturity and their readiness for the EU Cyber Resilience Act (CRA). As the key obligations under the CRA gradually become applicable, manufacturers…
Introduction The European Union’s Cyber Resilience Act (CRA) marks a significant shift in cybersecurity regulations for products with digital elements. While the full obligations of the CRA come into effect on December 11, 2027, a crucial deadline looms much sooner: September 11, 2026. From this date, manufacturers will be legally required to report actively exploited…
As the European Union’s Cyber Resilience Act (CRA) moves toward full implementation, manufacturers across multiple industries are assessing its impact on their products and development processes. A fundamental question often arises at the outset of any CRA project: “What category does my product belong to under the CRA?” This seemingly straightforward question often masks a…
Overview The European Telecommunications Standards Institute (ETSI) has recently released ETSI EN 304627 V1.0.0 Final Draft. As a vertical product standard supporting the EU Cyber Resilience Act (CRA), it specifies technical cybersecurity requirements and conformity assessment criteria for routers, modems, and switches. Once officially cited in the Official Journal of the European Union (OJEU), this…
One of the most common questions in the realm of cybersecurity compliance, particularly concerning the EU Cyber Resilience Act (CRA), is whether existing IEC 62443 certification automatically translates to CRA compliance. The short answer is: not necessarily. While IEC 62443 is a widely referenced cybersecurity framework, it’s crucial to understand that it should not be…