{"id":7267,"date":"2024-10-04T07:47:18","date_gmt":"2024-10-04T07:47:18","guid":{"rendered":"https:\/\/haavind.stage01.dekodes.no\/techinsight-new\/?post_type=tech-insight&p=7267"},"modified":"2024-10-16T11:21:11","modified_gmt":"2024-10-16T11:21:11","slug":"cyber-resilience-act","status":"publish","type":"tech-insight","link":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/","title":{"rendered":"Cyber Resilience Act"},"content":{"rendered":"\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\n

Cyber Resilience Act<\/h1>\n\n

Proposal for a regulation on horizontal cybersecurity requirements for products with digital elements (COM(2022)454)<\/em><\/p>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\n\n
\n\t\t\t
\n\t\t\t\t

Category<\/h4>\n\t\t\t\t\n\t\t\t
Cybersecurity<\/a><\/div>\n\t\t\t<\/div>\n
\n

Status<\/h3>\n\n\n\n

EU<\/strong><\/h4>\n\n\n\n

Adopted in the EU 10 October 2024.<\/p>\n\n\n\n

EEA<\/strong><\/h4>\n\n\n\n

Pending. The Commission has marked the proposal as EEA-relevant.<\/p>\n\n\n\n

Norway<\/strong><\/h4>\n\n\n\n

Pending.<\/p>\n<\/div>\n<\/div>\n\n\n

Scope<\/h2>\n\n\n\n

The proposal aims to enhance the functioning of the internal market by introducing EU-wide cybersecurity requirements for design, development, production and making available on the market of hardware and software products.

The Regulation will apply to all products that are connected, indirectly or directly to another device or to a network. There are some exceptions for products for which cybersecurity requirements are already set out in existing rules, such as medical devices, aeronautical products and cars.

In addition to crucial cybersecurity requirements, the Regulation will impose obligations on economic operators and introduce provisions for conformity assessment, notification to conformity assessment bodies, and market surveillance.<\/p>\n\n\n\n

Relevance<\/h2>\n\n\n\n

The objective of the proposal is to address deficiencies, clarify connections, and enhance the overall coherence of existing cybersecurity legislation. This includes ensuring the security of products with digital components, such as ‘Internet of Things’ (IoT) products, across the entire supply chain and throughout their lifespan which will affect the businesses of both manufacturers, importers and distributors.<\/p>\n\n\n\n

Key obligations<\/h2>\n\n\n\n

The main obligations from the Commission proposal are:<\/p>\n\n\n\n

    \n
  • Rules to rebalance responsibility for compliance towards manufacturers, imposing obligations such as providing cybersecurity risk assessments, issuing declarations of conformity and cooperation with authorities.<\/li>\n\n\n\n
  • Vulnerability handling processes for manufacturers to manage vulnerabilities and ensure cybersecurity in digital products, along with responsibilities for economic operators such as importers or distributors in relation to those processes.<\/span><\/li>\n\n\n\n
  • Steps to enhance transparency regarding the security of hardware and software products for both consumers and business users.<\/span><\/li>\n\n\n\n
  • Establishment of a market surveillance framework to enforce compliance with the Regulation.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

    Adopted in the EU (COM(2022)454)<\/p>\n","protected":false},"featured_media":7662,"menu_order":0,"template":"","meta":{"tech-insight-date":"2024-10-10T09:43:46","footnotes":""},"tech-insight-category":[92],"tech-insight-jurisdiction":[83,84],"tech-insight-status":[86,97],"acf":[],"yoast_head":"\nCyber Resilience Act - Haavind Tech Insight<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyber Resilience Act\" \/>\n<meta property=\"og:description\" content=\"Adopted in the EU (COM(2022)454)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/\" \/>\n<meta property=\"og:site_name\" content=\"Haavind Tech Insight\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-16T11:21:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"460\" \/>\n\t<meta property=\"og:image:height\" content=\"352\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/\",\"url\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/\",\"name\":\"Cyber Resilience Act - Haavind Tech Insight\",\"isPartOf\":{\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg\",\"datePublished\":\"2024-10-04T07:47:18+00:00\",\"dateModified\":\"2024-10-16T11:21:11+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#primaryimage\",\"url\":\"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg\",\"contentUrl\":\"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg\",\"width\":460,\"height\":352,\"caption\":\"Cityscape on dark blue background with bright glowing neon. Technology city background\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Resilience Act\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/#website\",\"url\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/\",\"name\":\"Haavind Tech Insight\",\"description\":\"Stay ahead with our digital roadmap of EU Tech regulations\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/haavind.stage01.dekodes.no\/techinsight\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Cyber Resilience Act - Haavind Tech Insight","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/","og_locale":"en_US","og_type":"article","og_title":"Cyber Resilience Act","og_description":"Adopted in the EU (COM(2022)454)","og_url":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/","og_site_name":"Haavind Tech Insight","article_modified_time":"2024-10-16T11:21:11+00:00","og_image":[{"width":460,"height":352,"url":"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/","url":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/","name":"Cyber Resilience Act - Haavind Tech Insight","isPartOf":{"@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/#website"},"primaryImageOfPage":{"@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#primaryimage"},"image":{"@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#primaryimage"},"thumbnailUrl":"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg","datePublished":"2024-10-04T07:47:18+00:00","dateModified":"2024-10-16T11:21:11+00:00","breadcrumb":{"@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#primaryimage","url":"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg","contentUrl":"https:\/\/haavind.stage01.dekodes.no\/content\/uploads\/sites\/5\/2024\/10\/Cyber-Resilience-Act-460x352-1.jpg","width":460,"height":352,"caption":"Cityscape on dark blue background with bright glowing neon. Technology city background"},{"@type":"BreadcrumbList","@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/tech-insight\/cyber-resilience-act\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/"},{"@type":"ListItem","position":2,"name":"Cyber Resilience Act"}]},{"@type":"WebSite","@id":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/#website","url":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/","name":"Haavind Tech Insight","description":"Stay ahead with our digital roadmap of EU Tech regulations","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight\/7267"}],"collection":[{"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight"}],"about":[{"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/types\/tech-insight"}],"version-history":[{"count":7,"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight\/7267\/revisions"}],"predecessor-version":[{"id":7781,"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight\/7267\/revisions\/7781"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/media\/7662"}],"wp:attachment":[{"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/media?parent=7267"}],"wp:term":[{"taxonomy":"tech-insight-category","embeddable":true,"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight-category?post=7267"},{"taxonomy":"tech-insight-jurisdiction","embeddable":true,"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight-jurisdiction?post=7267"},{"taxonomy":"tech-insight-status","embeddable":true,"href":"https:\/\/haavind.stage01.dekodes.no\/techinsight\/wp-json\/wp\/v2\/tech-insight-status?post=7267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}