The Cyber Resilience Act came into force in October 2024. It ushers in a new regulatory era for connected products, imposing strict cybersecurity requirements on all actors in the European market, from manufacturers to distributors. The EU is taking a tougher stance on digital product security. With the Cyber Resilience Act (CRA), a unified regulatory framework is being introduced for all products with digital elements placed on the European internal market. Manufacturers, importers and distributors must prepare for a completely new environment. The CRA significantly reshapes existing development, production and support processes. Companies of all sizes are now compelled to make cybersecurity a core part of their product strategy.

https://incyber.org/en/article/security-requirements-for-connected-products-the-disruption-brought-by-the-cyber-resilience-act/