New ENISA document shows alignments between the CRA and industry standards. An important resource for manufacturers and security experts.
The increasing number of cyberattacks and the resulting financial burdens urgently require a solid legal framework. The CRA addresses this precisely and defines essential cybersecurity requirements for manufacturers of products with digital components. The publication facilitates the implementation of the CRA requirements by mapping them to existing standards and norms that manufacturers can comply with.
This comparison is not only important support for further standardization efforts, but also an important resource for everyone working on CRA compliance. Many thanks to the teams at ENISA and the Joint Research Centre (JRC) for their excellent work. This publication is a must for anyone involved in product security.
The mapping and further information can be found here: https://www.enisa.europa.eu/publications/cyber-resilience-act-requirements-standards-mapping