CRA Implementing Regulation

(1) Cyber Resilience Act (CRA) lays down rules on the cybersecurity of products with digital elements. In particular, Annex III to that Regulation sets out categories of important products with digital elements that, when placed on the market, are subject to conformity assessment procedures that are stricter than those applicable to other products with digital elements. Annex IV to Cyber Resilience Act (CRA) sets out categories of critical products with digital elements for which manufacturers could be required to obtain a European cybersecurity certificate under a European cybersecurity certification scheme pursuant to Cybersecurity Act of the European Parliament and of the Council or which would be subject to mandatory third-party conformity assessment, when placed on the market.