Useful links
Official EU resources relevant to the interpretation, application and enforcement of the Cyber Resilience Act
Official European Union sources specific to the Cyber Resilience Act that a practitioner is likely to need day to day, grouped by type and ordered by likely usefulness. All links were checked on 19 September 2026 (ePrivacy and PECR links); 18 September 2026 (DPA 2018); 17 September 2026 (UK GDPR); 16 September 2026 (EU sites).
1. The legislation
- Regulation (EU) 2024/2847 (Cyber Resilience Act), Official Journal text eur-lex.europa.eu
- Consolidated text of Regulation (EU) 2024/2847 (incorporating the corrigenda) eur-lex.europa.eu
- Commission Implementing Regulation (EU) 2025/2392 on the technical description of the categories of important and critical products with digital elements eur-lex.europa.eu
- Commission Delegated Regulation (EU) 2026/881 on the cybersecurity-related grounds for delaying the dissemination of notifications (Article 14(9)) eur-lex.europa.eu
- Commission Delegated Regulation (EU) 2025/1535 on the exclusion of certain products falling within Regulation (EU) No 168/2013 eur-lex.europa.eu
2. EU-level guidance
- Commission guidance on the application of the Cyber Resilience Act, C(2026) 5252 of 27 July 2026 (Article 26) digital-strategy.ec.europa.eu
- Cyber Resilience Act implementation: frequently asked questions (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act policy page (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act: implementation (European Commission fact page) digital-strategy.ec.europa.eu
- Cyber Resilience Act: reporting obligations (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act: conformity assessment (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act: standardisation (European Commission) digital-strategy.ec.europa.eu
3. Notification and reporting platforms
- CRA Single Reporting Platform (SRP), portal for notifying actively exploited vulnerabilities and severe incidents (ENISA) portal.cra-srp.enisa.europa.eu
- Single Reporting Platform: information page (ENISA) enisa.europa.eu
- CRA SRP Assigned Representative user manual (ENISA, PDF) enisa.europa.eu
- European Vulnerability Database (EUVD) (ENISA) euvd.enisa.europa.eu
4. Regulators, authorities and bodies
- ENISA: product security (Cyber Resilience Act topic page) enisa.europa.eu
- Market surveillance authorities designated under the Cyber Resilience Act (Single Market Compliance Space) webgate.ec.europa.eu
- Notifying authorities under the Cyber Resilience Act (Single Market Compliance Space) webgate.ec.europa.eu
- Notified bodies database (NANDO, Single Market Compliance Space) webgate.ec.europa.eu
- EUCC certification scheme (Common Criteria) (ENISA) certification.enisa.europa.eu