Cyber Resilience Act Requirements Standards Mapping Hernandez Ramos by Hernandez Ramos, J.l., Karopoulos, G., Nai Fovino, I., Spigolon, R., Sportiello L., Steri, G., Gorniak, S., Magnabosco, P., Atoui, R., Crippa Martinez, C. 9789268141809, 9268141809 instant download after payment.

EUR 31892 EN

PDF ISBN 978-92-68-14180-9 ISSN 1831-9424 doi:10.2760/905934 KJ-NA-31-892-EN-N

Luxembourg: Publications Office of the European Union, 2024

© European Union, 2024

The increasing number of cyberattacks affecting digital products, coupled with widespread

vulnerabilities and insufficient timely security updates, creates heavy financial burdens on society.

In response, the European Commission has drafted the Cyber Resilience Act (CRA), a new proposal

for regulation to define the legislative framework of essential cybersecurity requirements that

manufacturers must meet when placing any product with digital elements on the internal market.

To facilitate adoption of the CRA provisions, these requirements need to be translated into the

form of harmonised standards, with which manufacturers can comply. In support of the

standardisation effort, this study attempt to identify the most relevant existing cybersecurity

standards for each CRA requirement, analyses the coverage already offered on the intended scope

of the requirement and highlights possible gaps to be addressed.