Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Country brief for French manufacturers under the CRA: CERT-FR routing, ANSSI as notifying authority, ANFR for market surveillance, COFRAC accreditation.
Country brief for Spanish manufacturers under the CRA: likely INCIBE-CERT reporting, the CCN/ENAC notified-body split, Spanish-language duties, and funding.
Cyber Resilience Act key dates: reporting starts on 11 September 2026 and main obligations apply from 11 December 2027.
Get notified when we publish new articles about CRA compliance and product security.
