European Union

CRA

The Cyber Resilience Act sets essential cybersecurity requirements for products with digital elements sold in the EU, covering secure design and development, vulnerability handling (including a software bill of materials), technical documentation, and mandatory reporting of actively exploited vulnerabilities and severe incidents to ENISA.