Cyber Resilience Act CRA
Annex IV. The EU's cybersecurity law for products with digital elements. Effective 2027.
▸ Key points
What you need to know.
- Annex IV conformity assessment procedures
- Applies to: all products with digital elements (software + hardware)
- 5 security requirements: secure by default, vulnerability handling, software bill of materials, security updates, integrity of data
- Reporting obligations for actively exploited vulnerabilities
- CE marking required