Manufacturer Obligations

Under the Cyber Resilience Act manufacturers of digital products placed on the EU market must embed security by design, carry out risk assessments, supply timely patches and updates, keep detailed technical documentation, and promptly disclose any vulnerabilities. They also must follow conformity-assessment procedures and cooperate with supervisory authorities.