Useful links
Official EU resources relevant to the interpretation, application and enforcement of the Cyber Resilience Act
Official European Union sources specific to the Cyber Resilience Act that a practitioner is likely to need day to day, grouped by type and ordered by likely usefulness. All links were checked on 29 October 2026, except two on the Commission’s website, which could not be opened that day.
1. The legislation
- Regulation (EU) 2024/2847 (Cyber Resilience Act), Official Journal text eur-lex.europa.eu
- Consolidated text of Regulation (EU) 2024/2847 (incorporating the corrigenda) eur-lex.europa.eu
- Commission Implementing Regulation (EU) 2025/2392 on the technical description of the categories of important and critical products with digital elements eur-lex.europa.eu
- Commission Delegated Regulation (EU) 2026/881 on the cybersecurity-related grounds for delaying the dissemination of notifications (Article 14(9)) eur-lex.europa.eu
- Commission Delegated Regulation (EU) 2025/1535 on the exclusion of certain products falling within Regulation (EU) No 168/2013 eur-lex.europa.eu
2. EU-level guidance
- Commission guidance on the application of the Cyber Resilience Act, C(2026) 5252 of 27 July 2026 (Article 26) digital-strategy.ec.europa.eu
- Cyber Resilience Act implementation: frequently asked questions (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act policy page (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act: implementation (European Commission fact page) digital-strategy.ec.europa.eu
- Cyber Resilience Act: reporting obligations (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act: conformity assessment (European Commission) digital-strategy.ec.europa.eu
- Cyber Resilience Act: standardisation (European Commission) digital-strategy.ec.europa.eu
3. Notification and reporting platforms
- CRA Single Reporting Platform (SRP), portal for notifying actively exploited vulnerabilities and severe incidents (ENISA) portal.cra-srp.enisa.europa.eu
- Single Reporting Platform: information page (ENISA) enisa.europa.eu
- CRA SRP Assigned Representative user manual (ENISA; the page carries the current version, 1.2 of 21 October 2026 when checked) enisa.europa.eu
- European Vulnerability Database (EUVD) (ENISA) euvd.enisa.europa.eu
4. Regulators, authorities and bodies
- ENISA: product security (Cyber Resilience Act topic page) enisa.europa.eu
- Market surveillance authorities designated under the Cyber Resilience Act (Single Market Compliance Space) webgate.ec.europa.eu
- Notifying authorities under the Cyber Resilience Act (Single Market Compliance Space) webgate.ec.europa.eu
- Notified bodies database (NANDO, Single Market Compliance Space) webgate.ec.europa.eu
- EUCC certification scheme (Common Criteria) (ENISA) certification.enisa.europa.eu