Forbes July 11, 2024
Stephanie Domas is the CISO of Canonical, the makers of the open-source Linux operating system Ubuntu.
The Cyber Resilience Act (CRA) is a piece of European Union legislation that aims to make devices safer by implementing more rigorous cybersecurity, documentation and vulnerability reporting requirements in the EU’s IT industry.
However, the bill’s numerous requirements have developers, distributors, manufacturers and retailers of digital products concerned. As a CISO, let me help clear up concerns by breaking down the CRA into the most important bits that every device manufacturer needs to know.
What does the CRA mean for you?
First and foremost, the CRA applies to products that contain digital elements that will be sold in the EU. Your requirements under the...