The Cyber Resilience Act (CRA) aims to address the increasing cybersecurity threats faced by hardware and software products by setting essential cybersecurity requirements for manufacturers, with stricter assessments for important and critical products. The European Commission has issued a draft standardisation request to the ESOs for the development of several deliverables to support the implementation of the CRA.
The approach under the standardisation request includes the development of horizontal standards for a generic framework and vertical standards tailored to specific product risks. The cross-border nature of cyber threats needs EU-level action to ensure a competitive single market and boost trust in digital products. Standards will facilitate compliance, particularly for small and medium-sized enterprises. Timely development and availability of these standards is crucial for effective implementation.
The STAN4CR project aims to support and accelerate the standardization efforts within the EU, fostering collaboration and coherence in the rapidly evolving cyber security landscape, aiming to prevent security incidents and minimise the impacts of such incidents, including in relation to the health and safety of users.