Post

The Cyber Resilience Act mandates that commercial software handle vulnerabilities well. What does that mean exactly? The CRA names sound principles in Annex I Part II, but applying them in practice is another thing.

28/1/26, 12:36 pm0 reposts3 likes

Daniel Ehrenberg

@littledan.dev

28 Jan

For this reason, there's an ongoing standardization effort translate these principles into more clear requirements to meet, to make it easier to demonstrate compliance.

Daniel Ehrenberg

@littledan.dev

28 Jan

The draft standard now entering a public review phase, so *we need your opinions, thoughts and analysis to improve it*. This article explains where things are, and how to get involved. www.agoria.be/en/services/...

agoria.bePublic enquiry concerning the new draft standard prEN 40000-1-3 ‘Vulnerability Handling’, in support of the Cyber Resilience ActThe public enquiry concerning the prEN 40000-1-3 standard entitled ‘Cybersecurity requirements for products with digital elements – Vulnerability Handling’ has been published on the NBN website. This ...