Category: News

What does Article 14 of Regulation (EU) 2024/2847 entail for manufacturers of products with digital components? We have prepared methodological guidance that explains manufacturers’ reporting obligations from the perspective of the National Security Authority (NBÚ) and the national cybersecurity incident response unit SK-CERT. The document will help manufacturers better understand the obligations arising from the…

The product is on the market. Security work does not end there – on the contrary, the next phase begins.

The Cyber Resilience Act (CRA) will significantly impact not only manufacturers of digital products but will also bring changes for public sector organizations that purchase, operate, and manage these technologies.

Imagine a vulnerable device that, in the space of a single day, is distributed to thousands of customers across Europe. Until now, in such situations, it has largely been down to the manufacturer’s goodwill as to when and how they inform the public and the authorities. From 11 September 2026, however, this voluntary approach will…

The reporting obligations under Article 14 of the CRA apply from 11 September 2026. Find out who must report, which deadlines apply and where to start.

Annex I to the CRA turns product security into specific characteristics: secure default settings, a smaller attack surface, data protection and secure updates.

The draft prepared by the National Security Authority is intended to implement the European Cyber Resilience Act in the Slovak legal order.

Prepare for the new obligations in time. The Cyber Resilience Act (CRA) is entering another important phase.

The European Commission has published practical guidance to support preparation for implementation of the Cyber Resilience Act (CRA) and help manufacturers, developers and businesses of all sizes meet their obligations.

ENISA’s survey shows that the CRA is a significant driver of Software Bill of Materials adoption and is accelerating implementation across organisations.