The Cyber Resilience Act is the first European regulation to set out the minimum cybersecurity requirements for all networked devices, software, and digital components sold in the EU. Its aim is to strenghten cybersecurity within the European Union. The new regulations will apply in all EU Member States and will be implemented in stages.

From 11 September 2026, manufacturers will be required to report actively exploited vulnerabilities or serious security incidents affecting their products. From 11 December 2027, all products containing digital elements must comply with all CRA requirements.

This series of presentations by the BSI covers the following topics to ensure you are fully prepared for the CRA:

Welcome by the Federal Ministry of Inter ...