The CRA says what products must achieve; the EN 40000 family says how. As Rapporteur in CEN/CLC/JTC 13 WG 9, I explain how the four horizontal parts fit together, where each stands (1-1 and 1-2 approved, 1-3 heading to Formal Vote), and what manufacturers should do now before December 2027.
… Read More
CRA
The EN 40000 family: how the CRA horizontal standards fit together
€11.5M in EU co-funding for CRA compliance: the second SECURE Open Call is open
SMEs that make, import or distribute products with digital elements can now apply for up to EUR 30,000 to fund their Cyber Resilience Act (CRA) compliance work. The second SECURE Open Call runs from 1 October to 11 December 2026. … Read More
prEN 40000-1-3 Reaches the Pre-Formal Vote HAS Assessment
Today, 3 August 2026, we reached another important milestone in the development of prEN 40000-1-3: Cybersecurity requirements for products with digital elements – Part 1-3: Vulnerability handling. After several months (~4 Months) of comment resolution and technical review, the document … Read More
Tags: CRA, EN 4000-1-3, EN 40000, Vulnerability Handling