Connect with us

Cyber Security

Commission publishes new guidance to support businesses' implementation of the Cyber Resilience Act

SHARE:

Published

2 weeks ago

on

We use your sign-up to provide content in ways you've consented to and to improve our understanding of you. You can unsubscribe at any time.

Manufacturers, developers and businesses of all sizes across the EU now have new guidance on how to apply the Cyber Resilience Act. This will help them prepare for mandatory cybersecurity requirements and reporting obligations.

The new Commission guidance explains how these rules apply in practice. It clarifies which products fall within the scope of the Act, what constitutes a substantial modification, how support periods should be understood, and how to meet reporting obligations and risk assessment requirements.

It also responds to questions raised by businesses, giving particular attention to microenterprises and small and medium-sized enterprises. It includes practical examples and uses cases to help reduce any unnecessary administrative burden.

Tech Sovereignty, Security and Democracy Executive Vice President Henna Virkkunen (pictured) said: "This guidance is part of our simplification agenda, helping businesses meet their obligations under the Cyber Resilience Act on time and with confidence. A cyber-secure Europe and a business-friendly Europe go hand in hand: today's guidance will help ensure that products on our market are protected from cyber threats, while avoiding unnecessary burden and legal uncertainty for companies.”

Recent developments in frontier AI models with cybersecurity capabilities render the swift and correct implementation of the Cyber Resilience Act even more imperative. The Cyber Resilience Act, in force since December 2024, sets mandatory cybersecurity requirements across the full lifecycle of digital products, with reporting obligations applying as of 11 September 2026. Ahead of the December 2027 compliance deadline, the guidance marks a further concrete step in the Commission's simplification agenda.

More information is available online.

Share this article:

Share this:
Related Topics:
EU Reporter publishes articles from a variety of outside sources which express a wide range of viewpoints. The positions taken in these articles are not necessarily those of EU Reporter. Please see EU Reporter’s full Terms and Conditions of publication for more information EU Reporter embraces artificial intelligence as a tool to enhance journalistic quality, efficiency, and accessibility, while maintaining strict human editorial oversight, ethical standards, and transparency in all AI-assisted content. Please see EU Reporter’s full A.I. Policy for more information.
Advertisement

Trending