cra

2 articles on this topic

cra
compliance

Cyber Resilience Act: under three weeks to 11 September

In July we explained why the CRA's first binding deadline is 11 September 2026, not 2027. Now time is up: from 11 September the 24 and 72-hour clocks for exploited vulnerabilities start. The final checklist, no theory.

24 Aug 2026, 2 min read

cra
compliance

Cyber Resilience Act: the first deadline is not 2027, it is 11 September 2026

The CRA's first binding obligation is not December 2027: it is 11 September 2026, when reporting of actively exploited vulnerabilities begins. What the Commission's new guidance says and what to prepare now.

28 Jul 2026, 3 min read

Cyber Resilience Act: under three weeks to 11 September

Cyber Resilience Act: the first deadline is not 2027, it is 11 September 2026

Have a project in mind?