European Union: Implemented Regulation 2024/2847 on horizontal cybersecurity requirements for products with digital elements amending the Cyber Resilience Act (2020/1828)
Description
Implemented Regulation 2024/2847 on horizontal cybersecurity requirements for products with digital elements amending the Cyber Resilience Act (2020/1828)
On 11 December 2027, Regulation 2024/2847 on horizontal cybersecurity requirements for products with digital elements amending Regulations (EU) No 168/2013 and (EU) No 2019/1020 and the Cyber Resilience Act (2020/1828) enters into force. The EU Regulation (2024/2847) on the Cyber Resilience Act aims to enhance the cybersecurity of products with digital elements by establishing uniform cybersecurity requirements across the EU. The regulation applies to all products with digital elements, including hardware and software, that are placed on the EU market, excluding those covered by specific existing regulations such as medical devices and motor vehicles. Manufacturers must ensure that their products meet essential cybersecurity requirements throughout their lifecycle, from design to disposal. This includes conducting risk assessments, handling vulnerabilities, and providing secure updates. Compliance is demonstrated through internal controls or third-party assessments, with more stringent requirements for important and critical products, including European Cybersecurity Certification.
Original source