news.risky.biz • 2h
ETSI and the EU Cyber Resilience Act CRA Technical Standards
The European Union is transitioning the Cyber Resilience Act (CRA) from a legislative framework to technical implementation. ETSI has released 17 draft cybersecurity standards establishing minimum security feature sets across core technology categories for connected devices. These "Harmonised Standards" allow manufacturers to achieve a "presumption of conformity," ensuring legal market access within the EU. Failure to implement these lifecycle security protocols by the December 2027 enforcement deadline will result in a prohibition of sale for non-compliant hardware and software products within the EU market.