Cyber Resilience Act: new EU rules in a nutshell

About the webinar

The Cyber Resilience Act is a European regulation that, for the first time, introduces mandatory cybersecurity requirements for products with digital elements – from software to smart devices to network components. It applies to manufacturers, importers, and distributors, and across industries, not just IT.

For companies and start-ups alike, it means a new agenda: ensuring product security throughout its entire lifecycle, maintaining documentation, assessing conformity, affixing the CE marking, and addressing vulnerabilities. The deadlines are approaching – the obligation to report vulnerabilities and incidents will apply from September 2026, and the rest of the regulation from 11 December 2027.

In the webinar, we won't overwhelm you with details, but we'll explain who the CRA affects and what to start mapping out now so you can get the essentials done in time.

Agenda

• What counts as a product with digital elements under the CRA: how to tell whether your product is a "product with digital elements".
• Who plays which role: what the CRA means for manufacturers, importers, and distributors, and how their obligations differ.
• Development, documentation, and conformity assessment: what you'll need to address during product development, in your documentation, and with the CE marking.
• Vulnerabilities and the product lifecycle: how the CRA handles security and vulnerabilities throughout the time a product is on the market.
• What to start mapping out now: where to begin before the obligations take full effect, and what to get done by 12/2027 so you can keep placing products on the EU market.