Standardization in support of the EU Cyber Resilience Act
The platform for the Cyber Resilience Act standardization process. Explore topics, join technical work, and contribute to shaping Europe's digital security future.
What is the Cyber Resilience Act?
The Cyber Resilience Act (CRA) is a landmark European regulation establishing cybersecurity requirements for products with digital elements placed on the EU market.
It mandates that manufacturers, importers, and distributors ensure their products meet essential cybersecurity requirements throughout their entire lifecycle — from design to end-of-life.
The CRA champions proactive risk management and accountability, ensuring that digital products remain secure and trustworthy for users across the EU.
Harmonized standards developed by European Standardisation Organisations (CEN, CENELEC, ETSI) provide the technical specifications to demonstrate compliance with the CRA.
The Cyber Resilience Act (CRA) aims to enhance EU cybersecurity by ensuring that digital products and services remain secure throughout their lifecycle. It promotes proactive risk management and accountability, enabling businesses and users to collaborate in building a safer digital future.
The Cyber Resilience Act (CRA) strengthens cybersecurity across the EU by ensuring digital products and services remain secure throughout their entire lifecycle.
Standardization turns the CRA's goals into reality.
Learn more about STAN4CRASupported by
Find your entry point
Industry
Organizations directly impacted by the Cyber Resilience Act and involved in bringing digital products and services to market.
- Product manufacturers including digital elements
- Service providers
- SMEs
- Importers and distributors
Stakeholders
Contributors, experts and knowledge actors helping shape the future of cybersecurity standards.
- Open source communities
- Consumer associations
- Cybersecurity experts and Labs
- Academia
Market Surveillance
Regulatory and supervisory actors ensuring compliance, governance and implementation of the CRA framework.
- European Commission and Agencies (ENISA, JRC)
- National Market Surveillance Authorities
- Notified Bodies
From policy to implementation
Each stakeholder plays a distinct role in turning the Cyber Resilience Act into practical, harmonized standards across Europe. Understanding where you fit is the first step toward contributing to the future of cybersecurity standardisation.
Shape the future of European cybersecurity
Your expertise matters. Join the standardization process and help define how Europe protects its digital products and citizens.
Identify where you can contribute
Explore the relevant CRA Standardisation topics and technical committees aligned with your expertise.
Contact your National Standardization Body
Reach out to your national committee or standardization body to express your interest in participating.
Join the activities
Contribute directly to the standardization work and help shape future cybersecurity requirements.