Cyber Resilience Act for Public Sector & NGOs

The CRA establishes cybersecurity requirements for products with digital elements sold in the EU. Manufacturers must ensure security by design and provide vulnerability handling.

What CRA means for Public Sector & NGOs

Public Sector & NGOs organisations operating in the EU must comply with CRA obligations. Below are the key requirements that apply to your sector.

• Implement security by design
• Provide security updates for product lifetime
• Report actively exploited vulnerabilities
• Maintain technical documentation
• Conduct conformity assessment

Related Resources