Regulation (EU) 2024/2847 covers hardware and software products, with secure-by-design requirements, vulnerability handling and reporting obligations for manufacturers. Its obligations apply in stages after entry into force.
The Cyber Resilience Act framework page covers scope and deadlines.
Read more
Related terms
- NIS2
- NIS2 is the EU directive that sets cybersecurity risk-management and incident-reporting obligations for essential and important entities in critical sectors.
- EU AI Act
- The EU AI Act is the EU regulation setting obligations for AI systems by risk, from prohibited practices to high-risk systems and transparency duties.