This is a very important read. As another piece of the EUs cybersecurity risk management Jigsaw puzzle falls into place along-side EU NIS 2 and

← Back to Blog

This is a very important read. As another piece of the EUs cybersecurity risk management Jigsaw puzzle falls into place along-side EU NIS 2 and DORA, that are part of the EU 2020 Cybersecurity Strategy. Today the EU Commission and its members agreed the Cybersecurity Resilience Act (CRA).

The Cyber Resilience Act effects the security requirements relating to the properties of products and critical products with digital elements. Affecting the design, manufacture, import, sale and distribution of:

‘Product with digital elements’ means any software or hardware product and its remote data processing solutions, including software or hardware components to be placed on the market separately. – Article 3, Article 13

The CRA will guarantee:
1. Harmonized rules when bringing to market products or software with a digital component;
2. A framework of cybersecurity requirements governing the planning, design, development and maintenance of such products, with obligations to be met at every stage of the value chain;
3. An obligation to provide duty of care for the entire lifecycle of such products.

The Annex of covered products and services makes for an interesting read – https://lnkd.in/e8HtvFuh

Secure product e design, development, production and through life vulnerability management are a requirement under the CRA.

There is no doubt about the direction of cybersecurity risk management and regulation in the EU. EU NIS 2, DORA and the CRA build a suite of inter-connected capabilities for the management of cybersecurity risk. Effecting Critical National Infrastructure, Financial Institutions and now the manufacture, distribution and sale of products with digital elements across the EU. Regulations that effect organizations that trade with or in the EU.

Another ‘Left of Bang’ move to improve the cybersecurity of EU citizens. The effect of this proposal should not be underestimated.

Ted Dziekanowski Brian D. McCarthy

#cybersecurity #cyberriskmanagement #eunis2 #dora #cyberresilienceact

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7136322666939985921