Scope
This document provides generic technical cybersecurity requirements for products with digital elements including their remote dat processing solutions to fulfil the Essential Requirements of Annex I, Part I, (2)(a) through (2)(m) of the CRA.
Where appropriate, multiple alternative requirements are provided that can be chosen from on a risk basis.
The standard will include generic assessment criteria to support compliance of products with digital elements with the essential requirements of the CRA as listed above.
Guidance will be provided to support the user of the standard in selecting the appropriate requirements to address the identified risks demonstrating the relation between cybersecurity threats and requirements.
The EN 18031 series will be used as an input.
Purpose
A new work item is proposed to develop a harmonised standard covering the requested deliverable items 2 to 14 as listed in Annex I of the draft standardisation request published by the European Commission on April 16th 2024 in support of Union policy on cybersecurity requirements for products with digital elements.
Comment on proposal
Required form fields are indicated by an asterisk (*) character.