CRA for Consumer IoT: EN 303 645 and Smart Home Security
How the CRA applies to consumer IoT: default-category duties; Annex III Class I for smart-home security, social/tracking toys and health/children's wearables.
Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
How the CRA applies to consumer IoT: default-category duties; Annex III Class I for smart-home security, social/tracking toys and health/children's wearables.
How the CRA applies to industrial automation and OT: IEC 62443 alignment, why most PLCs and SCADA are default-category, and what raises the class.
Cyber Resilience Act key dates: reporting starts on 11 September 2026 and main obligations apply from 11 December 2027.
Get notified when we publish new articles about CRA compliance and product security.