Call us now:
The European Parliament adopted the text for the Cyber Resilience Act on Tuesday 12th March. The 338 pages of wording presents a complex arrangement of oversight, assurance and attestation of the cybersecurity of a broad range of products and service categories. Requiring covered entities of products with digital elements supplies and distributed for commercial use in the EU.
Requiring covered products to ensure products are designed, developed and produced to ensure an appropriate level of cybersecurity based on risk. Making products available without exploitable vulnerabilities; to ensure vulnerabilities can be addressed; appropriate access management; the protection of the confidentiality of stored, transmitted, processed data; data minimization, enable users to remove all data and settings, and be designed, developed and produced to reduce the impact of an incident using appropriate exploitation mitigation mechanisms and techniques.
The scope includes a broad range of products that includes Identity Management Systems, Browsers, Password Managers, Anti Virus and Endpoint, VPN, Network Management Systems, SIEM, Operating Systems, Router, Modems and Switches, Microprocessors and Microcontrollers, Digital wallets and open sourced code used in products with digital elements. It also applies to systems connected to products with digital elements, that remotely manage of the product and store data.
The CRA regulation that will effect organizations trading in and with the EU. Adding a further piece to the EUs cyber jigsaw puzzle that includes EU NIS 2, DORA, and the Resilience of Critical Entities Directive.
@Thaddeus Dziekanowski Brian D. McCarthy Rich Waite, M.Ed. George Sawyer Rachel V. Rose, JD, MBA Ryan Buckner Brian Levine Gerry Kennedy Johnathan Rudy
Veritas GRC
#cybersecurity #europeanunion #eunis2 #dora #cyberresilienceact
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7173949769982062592