{"id":36293,"date":"2025-04-22T16:21:20","date_gmt":"2025-04-22T14:21:20","guid":{"rendered":"https:\/\/esa.sinapps.info\/en\/?p=36293"},"modified":"2025-06-05T17:35:11","modified_gmt":"2025-06-05T15:35:11","slug":"new-network-remote-io-esaware-discover-all-features-3-2-2-2-4-2-2-2-2-2-3-2-2-2-2-2-2-3-2-3-2-2-2-2-2-2-2-3-2-4-2-2-2-2-2-2-2-2-2-2-4-2-2-3-2-2-2-2-2-2-2-2-2-2-2-4-3-2-3-2-2-2-2-2-2-2-2-2-2-2-2-2-2-90","status":"publish","type":"post","link":"https:\/\/esa.sinapps.info\/en\/cyber-resilience-act-safeguarding-europes-digital-assets\/","title":{"rendered":"Cyber Resilience Act: safeguarding Europe\u2019s Digital Assets"},"content":{"rendered":"

[vc_row][vc_column width=”1\/2″][vc_single_image image=”11437″ img_size=”full” el_class=”img-blog”][\/vc_column][vc_column width=”1\/2″][vc_column_text css=””]The European Union\u2019s Cyber Resilience Act<\/strong> introduces stricter cybersecurity requirements for all products with digital elements, mandating protective measures throughout their entire lifecycle. Given the complexity of the new regulatory framework, this article provides a clear and structured overview of the main obligations and implications for businesses.<\/p>\n

What is the Cyber Resilience Act<\/h2>\n

The Cyber Resilience Act (CRA) is one of the EU\u2019s first legislative initiatives designed to improve the cybersecurity of products and services with digital components<\/strong>, which are increasingly integrated into both industrial systems and everyday life. Devices such as industrial sensors, PLCs, remote control systems, as well as network technologies like firewalls and routers, and consumer products such as smartwatches, fall within the scope of this regulation.<\/p>\n

The CRA aims to provide companies with a clear framework to ensure the security and reliability of IoT devices used in industrial contexts, while also helping consumers make more informed decisions when purchasing and using connected devices. With the CRA in force, all devices and systems placed on the EU market, whether from European companies or international suppliers, must meet strict cybersecurity standards. This includes devices used in industrial automation. Companies will be required to implement advanced protection measures to reduce cyber risk, ensuring that their systems and infrastructures are resilient to attacks and capable of maintaining continuous operations while safeguarding sensitive data.<\/p>\n

Risk classification and compliance<\/h2>\n

The CRA introduces a detailed risk-based classification system for digital products, dividing them into three main categories:<\/p>\n

    \n
  • Class II<\/strong>: High-risk products that require certification by an accredited body<\/li>\n
  • Class I<\/strong>: Medium-risk products that require appropriate control and compliance measures<\/li>\n
  • Default category<\/strong>: Low-risk products for which a manufacturer\u2019s self-declaration of conformity is sufficient<\/li>\n<\/ul>\n

    Cybersecurity requirements and legal obligations under the CRA<\/h2>\n

    This regulatory framework requires companies in the manufacturing and industrial automation sectors to comply with high standards of security and transparency, ensuring ongoing protection against cyber threats. Specifically:<\/p>\n

      \n
    • Risk assessment<\/strong>: Manufacturers must continuously assess and mitigate cybersecurity risks throughout the entire product lifecycle<\/li>\n
    • Monitoring and updates<\/strong>: After being placed on the market, products must be continuously monitored to identify cybersecurity threats, and timely updates must be provided, free of charge, for at least five years. In urgent cases, immediate action is required<\/li>\n
    • Incident reporting<\/strong>: Exploited vulnerabilities and security incidents must be reported to national authorities through ENISA, within 24 hours for early warnings and 72 hours for complete notifications<\/li>\n
    • Transparency<\/strong>: Manufacturers must provide detailed technical documentation and clear instructions for end users, ensuring they are well informed about the security features of the products<\/li>\n<\/ul>\n

      [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

      The European Union\u2019s Cyber Resilience Act<\/strong> introduces stricter cybersecurity requirements for all products with digital elements, mandating protective measures throughout their entire lifecycle. Given the complexity of the new regulatory framework, this article provides a clear and structured overview of the main obligations and implications for businesses.<\/p>\n","protected":false},"author":1830,"featured_media":36294,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[6,164,3],"tags":[],"class_list":["post-36293","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-industry-4-0-and-iot","category-news"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t