CRA reporting obligations take effect on 11 September 2026, with product obligations following in 2027 – ENISA and BSI have published implementation documents on this.
With the non-binding, four-part Technical Guideline TR-03183, the BSI provides guidance on SBOM, vulnerability management and conformity assessment for the Cyber Resilience Act.
With the non-binding, four-part Technical Guideline TR-03183, the BSI provides guidance on SBOM, vulnerability management and conformity assessment for the Cyber Resilience Act.
According to the vendor, the decline in OT security maturity in the Fortinet 2026 report results from more realistic self-assessment rather than actual deterioration, while…
The Cyber Resilience Act mandates transparency and traceability of software components, shifting business models from license sales toward lifecycle-based responsibility assumed by IT service providers.
From 11 September 2026, manufacturers and businesses in the EU will face additional cybersecurity obligations arising from NIS2, the Cyber Resilience Act and the Machinery…
From 11 September 2026, additional cybersecurity obligations under NIS2, the Cyber Resilience Act and the Machinery Regulation will apply to manufacturers and operators in the…
The CRA requires manufacturers from September 2026 onwards to report actively exploited vulnerabilities, demanding full transparency on machine identities and secrets in the supply chain…
The CRA guidance clarifies open questions on scope of application, material product changes, support periods, and reporting obligations ahead of the September 2026 deadline.
