
The EU Cyber Resilience Act (CRA) was formally approved by the European Parliament on March 29, 2024, following a political agreement reached in December 2023. The regulation establishes cybersecurity requirements for digital products to ensure their resilience against cyber threats and to provide for secure usage across the European Union (EU). The aim of the Act is to enhance the security of digital products and connected devices across the EU. Its primary goal is ensuring that hardware, software, and IT services sold in the EU meet robust security standards throughout their lifecycles.