Compliance
ENISA Technology and Innovation Radar: What It Means for CRA
ENISA's April 2026 Technology and Innovation Radar shows how cyber technologies move from recognise to implement. What the scoring means for manufacturers.
Cyber Resilience Act Blog
Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Compliance
European Cybersecurity Certification Conference 2026: 29 EUCC certs, enough CABs?
ENISA reported 29 EUCC certificates and 28 accredited CABs after EUCC's first year. What that capacity means for CRA conformity assessment.
Compliance
CRA Conformity: Lessons from ENISA's EUDI Wallet Scheme
ENISA's first EU cybersecurity certification scheme requires SBOMs, rejects ISO 27001 alone, and puts suppliers in the certification chain. CRA implications.
Country & Market Guides
ECSMAF v3.0: How ENISA Maps the EU Cybersecurity Market
ENISA's ECSMAF v3.0 defines how the EU categorises its cybersecurity market: the supply-side taxonomy, CRA integration, and what it means for manufacturers.
Vulnerability Management
ENISA's Secure by Design Playbook: A CRA Guide
ENISA's Security by Design and Default Playbook (v0.4, 2026) turns CRA rules into 22 practical checklists for SMEs: principles, lifecycle and CRA mapping.
Compliance
CRA Commission Guidance: What the March 2026 Draft Means
The Commission's draft CRA guidance (Ares(2026)2319816): 9 key rulings on SaaS scope, legacy products, open source, and reporting obligations, explained.
Stay in the loop
Get notified when we publish new articles about CRA compliance and product security.