European Union: Introduced Cyber Resilience Act containing cybersecurity requirements
Description
Introduced Cyber Resilience Act containing cybersecurity requirements
On 15 September 2022, the European Commission introduced a proposal for the "Cyber Resilience Act" to the Council and European Parliament. The Act aims to establish common cybersecurity rules for digital products and related services that are placed on the market across the European Union. Particularly, the Act introduces cybersecurity rules for developing, designing, producing and selling products with digital elements (i.e., wireless and wired products and software) across their entire lifecycle. Finally, the Act introduces a taxonomy composed of "default" products (requiring only a self-assessment), "Critical Class I products" (requiring the application of a standard or a third-party assessment) and "Critical Class II products" (requiring a third-party assessment).
Original source