Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
ENISA onboards its first CVE Numbering Authorities: what 4 new CNAs and 7 transfers mean for the CRA Article 14 reporting chain before 11 September 2026.
ENISA's NCAF 2.0 (April 2026) is the first update in six years: three new objectives, 871 maturity questions, and explicit CRA references for governments.
ENISA's April 2026 Technology and Innovation Radar shows how cyber technologies move from recognise to implement. What the scoring means for manufacturers.
ENISA reported 29 EUCC certificates and 28 accredited CABs after EUCC's first year. What that capacity means for CRA conformity assessment.
ENISA's first EU cybersecurity certification scheme requires SBOMs, rejects ISO 27001 alone, and puts suppliers in the certification chain. CRA implications.
ENISA's ECSMAF v3.0 defines how the EU categorises its cybersecurity market: the supply-side taxonomy, CRA integration, and what it means for manufacturers.
Get notified when we publish new articles about CRA compliance and product security.
