Header image

EU cyber resilience act standards move forward

The European Union is advancing its cybersecurity landscape with the development of new technology standards to prepare manufacturers for the EU Cyber Resilience Act (CRA), which will take full effect in December 2027. The European Telecommunications Standards Institute (ETSI) has initiated the approval process for 17 crucial cybersecurity standards that European vendors must adhere to under the CRA, according to Infosecurity Magazine.

These draft standards, released on August 13, cover a broad spectrum of 17 product categories, including operating systems, network devices like routers and firewalls, security solutions such as SIEMs and antivirus software, and various IoT appliances including smart home devices, internet-connected toys, and wearables. 

The proposed standards outline minimum security requirements for products sold in the EU from December 2027. Key mandates include modern cryptography, secure-by-default configurations, the implementation of a software bill of materials (SBOM), and provisions for post-sale security updates. These standards are currently undergoing public enquiry across 41 European member organizations, with final versions expected by December 2026. The CRA will apply to all manufacturers, importers, distributors, and developers of hardware and software products sold within the EU market.

Source: Infosecurity Magazine

Kelley Damore
Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.

Kelley Damore
Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.

Upcoming Events

No events found.