As the European Union’s Cyber Resilience Act (CRA) moves toward full implementation, manufacturers across multiple industries are assessing its impact on their products and development processes. A fundamental question The One Lab’s CRA consulting team hears at the outset of nearly every CRA project: “What category does my product belong to under the CRA?” This…
Overview The European Telecommunications Standards Institute (ETSI) has recently released ETSI EN 304627 V1.0.0 Final Draft. As a vertical product standard supporting the EU Cyber Resilience Act (CRA), it specifies technical cybersecurity requirements and conformity assessment criteria for routers, modems, and switches. Once officially cited in the Official Journal of the European Union (OJEU), this…
One of the most common questions in the realm of cybersecurity compliance, particularly concerning the EU Cyber Resilience Act (CRA), is whether existing IEC 62443 certification automatically translates to CRA compliance. The short answer is: not necessarily. While IEC 62443 is a widely referenced cybersecurity framework, it’s crucial to understand that it should not be…
Understanding the “Digital Omnibus on AI”: Key Compliance Deadlines Enforced for High-Risk Systems (2027) and Smart Integrated Products (2028). Global software compliance and smart hardware market access have reached a pivotal milestone. The European Commission has welcomed the political agreement reached between the European Parliament and the Council of the EU on simpler, innovation-friendly rules…