Pins matching tag:"Cyber Resilience Act"

The EU's Cyber Resilience Act reaches its first live phase: manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities and severe incidents to ENISA and their national CSIRT - an early warning within 24 hours, a full notification within 72, and a final report within 14 days.

Every obligation the Cyber Resilience Act carries comes into force: products with digital elements may only be placed on the EU market if they meet the Act's essential cybersecurity requirements, carry a conformity assessment and are supported with security updates for their declared support period.