News, events and archive

October 5, 2026

Guidance on reporting obligations under the Cyber Resilience Act (CRA)

What does Article 14 of Regulation (EU) 2024/2847 entail for manufacturers of products with digital components? We have prepared methodological guidance that explains manufacturers’ reporting obligations from the perspective of the National Security Authority (NBÚ) and the national cybersecurity incident response unit SK-CERT. The document will help manufacturers better understand the obligations arising from the…

Read the article

October 2, 2026

Vulnerabilities: What manufacturer must do after placing the product in the market

The product is on the market. Security work does not end there – on the contrary, the next phase begins.

Read the article

September 17, 2026

The Cyber Resilience Act and Public Administration: What You Need to Know and How to Prepare?

The Cyber Resilience Act (CRA) will significantly impact not only manufacturers of digital products but will also bring changes for public sector organizations that purchase, operate, and manage these technologies.

Read the article

September 11, 2026

Article 14 comes into force: what can manufacturers expect from 11 September 2026?

Imagine a vulnerable device that, in the space of a single day, is distributed to thousands of customers across Europe. Until now, in such situations, it has largely been down to the manufacturer’s goodwill as to when and how they inform the public and the authorities. From 11 September 2026, however, this voluntary approach will…

Read the article

September 10, 2026 · Manufacturers

Reporting Vulnerabilities and Severe Incidents under the CRA from 11 September 2026

The reporting obligations under Article 14 of the CRA apply from 11 September 2026. Find out who must report, which deadlines apply and where to start.

Read the article

September 4, 2026 · Manufacturers and development teams

What Must a Product Comply with under the CRA? Annex I, Part I

Annex I to the CRA turns product security into specific characteristics: secure default settings, a smaller attack surface, data protection and secure updates.

Read the article

August 26, 2026 · Economic operators and the public

Government of the Slovak Republic Approves Draft Cyber Resilience Act

The draft prepared by the National Security Authority is intended to implement the European Cyber Resilience Act in the Slovak legal order.

Read the article

August 13, 2026

Practical CRA Webinar for Manufacturers, Importers and Distributors

Prepare for the new obligations in time. The Cyber Resilience Act (CRA) is entering another important phase.

Read the article

July 27, 2026

Commission Publishes New Guidance on the Cyber Resilience Act (CRA)

The European Commission has published practical guidance to support preparation for implementation of the Cyber Resilience Act (CRA) and help manufacturers, developers and businesses of all sizes meet their obligations.

Read the article

June 10, 2026

SBOM Survey Results

ENISA’s survey shows that the CRA is a significant driver of Software Bill of Materials adoption and is accelerating implementation across organisations.

Read the article

June 9, 2026 · Economic operators and the public

Slovak Cyber Resilience Act Was Subject to Public Consultation

Archived information about the consultation on the draft Slovak Act responding to the European Cyber Resilience Act.

Read the article

June 8, 2026

Technical Competence Requirements for Notified Bodies

ENISA has published Technical Competence Requirements for CRA Notified Bodies, a framework covering the education, experience, training and technical competence of notified-body personnel.

Read the article