{"id":4390,"date":"2026-09-14T14:24:52","date_gmt":"2026-09-14T12:24:52","guid":{"rendered":"https:\/\/naaia.ai\/?page_id=4390"},"modified":"2026-09-14T14:24:52","modified_gmt":"2026-09-14T12:24:52","slug":"cyber-resilience-act","status":"publish","type":"page","link":"https:\/\/naaia.ai\/en\/cyber-resilience-act\/","title":{"rendered":"Cyber Resilience Act"},"content":{"rendered":"\n<section class=\"naaia-solutions-hero section-dark alignfull wp-block-naaia-solutions-hero\">\n\n\t\t<div class=\"naaia-solutions-hero__glow\" aria-hidden=\"true\"><\/div>\n\n\t\t<nav class=\"naaia-solutions-hero__breadcrumb\" aria-label=\"Fil d&#039;ariane\">\n\t\t\t<ol class=\"naaia-breadcrumb__list\">\n\n\t\t\n\t\t\t\n\t\t\t<li class=\"naaia-breadcrumb__item text-body\">\n\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/naaia.ai\/en\/\" class=\"naaia-breadcrumb__link\">\n\t\t\t\t\t\t<svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\">\n\t\t<path d=\"M1 7L7.81219 2.06425C7.93042 1.97859 8.06958 1.97858 8.18781 2.06425L15 7\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t<path d=\"M13 6V12.4C13 13.2837 12.4404 14 11.75 14H4.25C3.55964 14 3 13.2837 3 12.4V6\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t<\/svg>\t\t\t\t\t\t<span>Home<\/span>\n\t\t\t\t\t<\/a>\n\n\t\t\t\t\n\t\t\t<\/li>\n\n\t\t\n\t\t\t\t\t\t\t<li class=\"naaia-breadcrumb__separator text-body\" aria-hidden=\"true\">&gt;<\/li>\n\t\t\t\n\t\t\t<li class=\"naaia-breadcrumb__item text-body naaia-breadcrumb__item--current\" aria-current=\"page\">\n\n\t\t\t\t\t\t\t\t\t<span>Cyber Resilience Act<\/span>\n\t\t\t\t\n\t\t\t<\/li>\n\n\t\t\n\t<\/ol>\n\t\t<\/nav>\n\n\t\t\t<div class=\"naaia-solutions-hero__lottie-wrapper\" aria-hidden=\"true\">\n\t\t<div\n\t\t\tclass=\"naaia-solutions-hero__lottie\"\n\t\t\tdata-lottie-src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/09\/Hero-Cyber-Resilience-Act-EN.json\"\n\t\t\tdata-lottie-mobile-src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/09\/Hero-mobile-Cyber-Resilience-Act-EN.json\"\n\t\t><\/div>\n\t<\/div>\n\t\n\t\t<div class=\"naaia-solutions-hero__content\">\n\n\t\t\t\t<div class=\"naaia-solutions-hero__tag\">\n\t\t\t<span class=\"naaia-solutions-hero__tag-dot\" aria-hidden=\"true\"><\/span>\n\t\t\t<span class=\"naaia-solutions-hero__tag-text text-body\">Regulation<\/span>\n\t\t<\/div>\n\t\t\n\t\t\t\t<h1 class=\"naaia-solutions-hero__title title-xl\">Assess, manage, and demonstrate your compliance with the Cyber Resilience Act<\/h1>\n\t\t\n\t\t\t\t<p class=\"naaia-solutions-hero__subtitle text-subtitle\">Already in force, the Cyber Resilience Act (CRA) now imposes new cybersecurity requirements on products with digital elements. Securing connected products throughout their lifecycle is no longer optional. With Naaia, you document security guarantees, manage vulnerabilities over time, and keep control of your software dependencies.<\/p>\n\t\t\n\t\t\n\t\t\t\t\t\t<a href=\"https:\/\/naaia.ai\/en\/get-a-demo\" class=\"naaia-solutions-hero__btn\">\n\t\t\t\t\t\t\t\t<span class=\"naaia-solutions-hero__btn-label\">\n\t\t\t\t\t<span class=\"naaia-solutions-hero__btn-text\">\u00c9valuez votre conformit\u00e9<\/span>\n\t\t\t\t\t<span class=\"naaia-solutions-hero__btn-text\" aria-hidden=\"true\">\u00c9valuez votre conformit\u00e9<\/span>\n\t\t\t\t<\/span>\n\t\t\t<\/a>\n\t\t\t\n\t\t\n\t<\/div>\n\n<\/section>\n\n\n\n<div class=\"alignfull wp-block-naaia-text-img\">\n<section class=\"naaia-text-img naaia-text-img--reversed\">\n\n\t\t<div class=\"naaia-text-img__glow\" aria-hidden=\"true\"><\/div>\n\n\t\t<div class=\"naaia-text-img__image-wrap\" aria-hidden=\"true\">\n\t\t\t\t\t<div\n\t\t\t\tclass=\"naaia-text-img__lottie\"\n\t\t\t\tdata-lottie-src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/09\/Comprendre-le-CRA-EN.json\"\n\t\t\t><\/div>\n\t\t\t<\/div>\n\n\t\t<div class=\"naaia-text-img__content\">\n\n\t\t\t\t<div class=\"naaia-text-img__tag naaia-tag\">\n\t\t\t<span>Understanding the CRA<\/span>\n\t\t<\/div>\n\t\t\n\t\t\t\t<h2 class=\"naaia-text-img__title title-l\">A product-cybersecurity-based approach<\/h2>\n\t\t\n\t\t\t\t<p class=\"naaia-text-img__description text-subtitle\">The Cyber Resilience Act (CRA) establishes a European regulatory framework designed to strengthen the cybersecurity of products with digital elements. It requires organizations to integrate security throughout the entire product lifecycle, from design to withdrawal from the market.<br \/>\n<br \/>\nThe CRA sets out specific obligations for the various operators across the value chain, including manufacturers, importers, distributors, authorized representatives, open-source software stewards, and modifying users. Each of them must implement the measures needed to ensure product security and the management of the associated cyber risks.<br \/>\n<br \/>\nThe products covered are subject to requirements relating to cybersecurity, vulnerability management, post-market surveillance, and incident reporting. The level of assessment and the applicable obligations vary according to the product&#039;s criticality and its potential impact on users and infrastructures. Its scope includes digital products, software, applications, and systems incorporating artificial intelligence (AI) capabilities. The regulation notably takes into account issues related to cybersecurity, connectivity, software updates, as well as predictive or learning features that may affect user safety.<\/p>\n\t\t\n\t\t\n\t\t\n\t<\/div>\n\n<\/section>\n<\/div>\n\n\n\n<div class=\"alignfull wp-block-naaia-text-img\">\n<section class=\"naaia-text-img\">\n\n\t\t<div class=\"naaia-text-img__glow\" aria-hidden=\"true\"><\/div>\n\n\t\t<div class=\"naaia-text-img__image-wrap\" aria-hidden=\"true\">\n\t\t\t\t\t<div\n\t\t\t\tclass=\"naaia-text-img__lottie\"\n\t\t\t\tdata-lottie-src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/09\/Exigence-reglementaires-EN.json\"\n\t\t\t><\/div>\n\t\t\t<\/div>\n\n\t\t<div class=\"naaia-text-img__content\">\n\n\t\t\t\t<div class=\"naaia-text-img__tag naaia-tag\">\n\t\t\t<span>Regulatory requirements <\/span>\n\t\t<\/div>\n\t\t\n\t\t\t\t<h2 class=\"naaia-text-img__title title-l\">The importance of defining the role of each operator<\/h2>\n\t\t\n\t\t\t\t<p class=\"naaia-text-img__description text-subtitle\">The CRA does not merely introduce requirements relating to the products themselves; it also assigns specific obligations to each actor involved in making a product with digital elements available on the European market. Depending on whether you are a manufacturer, importer, distributor, authorised representative, open-source software steward, or modifying user, the applicable responsibilities differ.<br \/>\n<br \/>\nThis classification is an essential step in identifying the relevant obligations, determining each actor&#039;s level of responsibility, and building a compliance plan tailored to your organisation.<br \/>\nManufacturers must, in particular, carry out a risk analysis, compile technical documentation, ensure product traceability, and put in place mechanisms to detect and manage incidents. Importers and distributors, for their part, must verify the conformity of products and cooperate with market surveillance authorities when a product poses a risk to the health or safety of consumers.<br \/>\n<br \/>\nThe regulation also requires the notification of serious incidents, the organisation of product recalls where necessary, and the provision of appropriate corrective measures for the consumers concerned. In this way, the regulation strengthens the accountability of the entire supply chain.<\/p>\n\t\t\n\t\t\n\t\t\n\t<\/div>\n\n<\/section>\n<\/div>\n\n\n\n<div class=\"alignfull wp-block-naaia-text-img\">\n<section class=\"naaia-text-img naaia-text-img--reversed\">\n\n\t\t<div class=\"naaia-text-img__glow\" aria-hidden=\"true\"><\/div>\n\n\t\t<div class=\"naaia-text-img__image-wrap\" aria-hidden=\"true\">\n\t\t\t\t\t<div\n\t\t\t\tclass=\"naaia-text-img__lottie\"\n\t\t\t\tdata-lottie-src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/09\/risques.json\"\n\t\t\t><\/div>\n\t\t\t<\/div>\n\n\t\t<div class=\"naaia-text-img__content\">\n\n\t\t\t\t<div class=\"naaia-text-img__tag naaia-tag\">\n\t\t\t<span>Risk of non-compliance<\/span>\n\t\t<\/div>\n\t\t\n\t\t\t\t<h2 class=\"naaia-text-img__title title-l\">What are the risks of non-compliance?<\/h2>\n\t\t\n\t\t\t\t<p class=\"naaia-text-img__description text-subtitle\">The CRA establishes a significant sanctions regime to ensure a high level of cybersecurity for digital products made available within the EU. In the event of non-compliance with the applicable requirements, the competent authorities may impose corrective measures, restrict or prohibit the product&#039;s availability on the market, or even require its withdrawal or recall. Financial penalties can reach up to \u20ac15 million or 2.5% of the company&#039;s total worldwide annual turnover for the preceding financial year, whichever is higher. Beyond the financial impact, non-compliance can also lead to significant operational, commercial, and reputational consequences for the organization.<\/p>\n\t\t\n\t\t\n\t\t\n\t<\/div>\n\n<\/section>\n<\/div>\n\n\n\n<div class=\"naaia-solutions-four-cards-wrapper section-light\">\n<section class=\"naaia-solutions-four-cards section-dark section-rounded-top alignfull wp-block-naaia-solutions-four-cards\">\n\n\t<div class=\"naaia-solutions-four-cards__inner\">\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__tag-row\">\n\n\t\t\t<div class=\"naaia-solutions-four-cards__trait naaia-solutions-four-cards__trait--left\" aria-hidden=\"true\">\n\t\t\t\t<div class=\"naaia-solutions-four-cards__trait-line\"><\/div>\n\t\t\t\t<div class=\"naaia-solutions-four-cards__trait-dot\"><\/div>\n\t\t\t<\/div>\n\n\t\t\t<div class=\"naaia-solutions-four-cards__tag\">\n\t\t\t\t<span>The solution<\/span>\n\t\t\t<\/div>\n\n\t\t\t<div class=\"naaia-solutions-four-cards__trait naaia-solutions-four-cards__trait--right\" aria-hidden=\"true\">\n\t\t\t\t<div class=\"naaia-solutions-four-cards__trait-dot\"><\/div>\n\t\t\t\t<div class=\"naaia-solutions-four-cards__trait-line\"><\/div>\n\t\t\t<\/div>\n\n\t\t<\/div>\n\n\t\t\t\t\t\t<h2 class=\"naaia-solutions-four-cards__title title-xl\">With Naaia<\/h2>\n\t\t\n\t\t\t\t\t\t<div class=\"naaia-solutions-four-cards__cards\">\n\n\t\t\t\t\t\t<div class=\"naaia-solutions-four-cards__card\" data-hover-icon>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-icon\">\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t<svg class=\"naaia-glass-stack\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 56 56\" fill=\"none\" aria-hidden=\"true\">\n\t\t\t\t\t<path d=\"M8.07944 35.3413C6.69861 34.5692 6.68987 33.3021 8.05993 32.5111L25.4576 22.4666C26.8276 21.6756 29.0577 21.6602 30.4385 22.4322L47.973 32.236C49.3538 33.008 49.3626 34.2751 47.9925 35.0661L30.5949 45.1106C29.2248 45.9016 26.9948 45.917 25.6139 45.145L8.07944 35.3413Z\" fill=\"#2EA3F9\"\/>\n\t\t\t\t\t<g class=\"naaia-glass-stack__top\">\n\t\t\t\t\t\t<path d=\"M6.68333 24.9028C5.30249 24.1307 5.29376 22.8636 6.66381 22.0726L25.5172 11.1876C26.8873 10.3966 29.1173 10.3813 30.4981 11.1533L49.4998 21.7773C50.8806 22.5494 50.8894 23.8165 49.5193 24.6075L30.6659 35.4925C29.2959 36.2835 27.0658 36.2988 25.685 35.5268L6.68333 24.9028Z\" fill=\"#2EA3F9\" fill-opacity=\"0.15\"\/>\n\t\t\t\t\t\t<path d=\"M24.2797 23.2894C24.2776 22.9947 24.6965 22.7529 25.2152 22.7493L30.8505 22.7105C31.3692 22.7069 31.7913 22.9429 31.7934 23.2376C31.7954 23.5324 31.3765 23.7742 30.8578 23.7778L25.2226 23.8166C24.7038 23.8202 24.2817 23.5842 24.2797 23.2894Z\" fill=\"white\"\/>\n\t\t\t\t\t\t<path d=\"M28.0218 21.1289C28.5405 21.1253 28.9627 21.3614 28.9647 21.6561L28.9868 24.858C28.9888 25.1528 28.5699 25.3946 28.0512 25.3982C27.5325 25.4017 27.1104 25.1657 27.1083 24.871L27.0863 21.669C27.0842 21.3743 27.5031 21.1325 28.0218 21.1289Z\" fill=\"white\"\/>\n\t\t\t\t\t<\/g>\n\t\t\t\t<\/svg>\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-text-group\">\n\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-title title-m\"><strong>Identify <\/strong>the products affected by the Cyber Resilience Act<div style=\"font-family: &quot;Segoe UI&quot;;font-size: 14px;line-height: 20px\"><div role=\"article\" aria-labelledby=\"copilot-message-_r_a82_-title copilot-message-_r_a82_\" data-tabster=\"{&quot;groupper&quot;:{&quot;tabbability&quot;:2},&quot;focusable&quot;:{}}\" class=\"fai-CopilotMessage r1f6yzd6 ___1fjo9g7 f1g2tzg5 fgct6un fy77jfu f2c7lf3\"><div data-tabster=\"{&quot;mover&quot;:{&quot;cyclic&quot;:false,&quot;direction&quot;:2,&quot;memorizeCurrent&quot;:true}}\" role=\"toolbar\" class=\"fai-CopilotMessage__actions rmlvq19 ___7qar2c0 fcthzvy\"><i role=\"none\" data-tabster-dummy=\"\" aria-hidden=\"true\" style=\"position: fixed;height: 1px;width: 1px;opacity: 0.001;z-index: -1;top: 0px;left: 0px\"><br><\/i><\/div><\/div><\/div><\/p>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-description text-body\">Determine which products fall within the scope of the CRA.<\/p>\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"naaia-solutions-four-cards__card\" data-hover-icon>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-icon\">\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t<svg class=\"naaia-glass-user\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 56 56\" fill=\"none\" aria-hidden=\"true\">\n\t\t\t\t\t<path class=\"naaia-glass-user__check-circle\" d=\"M53.1163 31.119C53.1163 36.0338 49.1321 40.0181 44.2172 40.0181C39.3024 40.0181 35.3181 36.0338 35.3181 31.119C35.3181 26.2041 39.3024 22.2198 44.2172 22.2198C49.1321 22.2198 53.1163 26.2041 53.1163 31.119Z\" fill=\"#2EA3F9\"\/>\n\t\t\t\t\t<path class=\"naaia-glass-user__check-mark\" fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M47.4013 27.6089C47.7619 27.2485 48.3464 27.2485 48.707 27.6089C49.0676 27.9696 49.0676 28.5549 48.707 28.9156L43.9189 33.7036C43.5583 34.0643 42.9729 34.0643 42.6123 33.7036C42.6102 33.7015 42.6085 33.6989 42.6064 33.6968C42.6015 33.6921 42.5957 33.688 42.5908 33.6831L40.3203 31.4126C39.9596 31.052 39.9596 30.4676 40.3203 30.107C40.6809 29.7465 41.2654 29.7464 41.6259 30.107L43.2646 31.7456L47.4013 27.6089Z\" fill=\"#F1F8FE\"\/>\n\t\t\t\t\t<path d=\"M2.88354 44.6891C2.88354 36.0322 9.90137 29.0144 18.5583 29.0144H25.9254C34.5823 29.0144 41.6002 36.0322 41.6002 44.6891C41.6002 47.2862 39.4948 49.3916 36.8977 49.3916H7.58597C4.98889 49.3916 2.88354 47.2862 2.88354 44.6891Z\" fill=\"#2EA3F9\" fill-opacity=\"0.15\"\/>\n\t\t\t\t\t<path d=\"M31.8147 16.1812C31.8147 21.4681 27.5288 25.754 22.2419 25.754C16.955 25.754 12.6691 21.4681 12.6691 16.1812C12.6691 10.8943 16.955 6.6084 22.2419 6.6084C27.5288 6.6084 31.8147 10.8943 31.8147 16.1812Z\" fill=\"#2EA3F9\" fill-opacity=\"0.15\"\/>\n\t\t\t\t<\/svg>\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-text-group\">\n\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-title title-m\">Automatically <strong>qualify<\/strong> your security obligations<\/p>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-description text-body\">Automatically identify the operational actions to implement and integrate them into your governance<\/p>\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"naaia-solutions-four-cards__card\" data-hover-icon>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-icon\">\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t<svg class=\"naaia-glass-check\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 56 56\" fill=\"none\" aria-hidden=\"true\">\n\t\t\t\t\t<circle class=\"naaia-glass-check__dot\" cx=\"41.1914\" cy=\"40.958\" r=\"14.449\" fill=\"#2EA3F9\"\/>\n\t\t\t\t\t<path d=\"M1.2926 14.2354C1.2926 9.25767 5.32786 5.22241 10.3056 5.22241H36.8296C41.8073 5.22241 45.8426 9.25767 45.8426 14.2354V33.549C45.8426 38.5267 41.8073 42.562 36.8296 42.562H10.3056C5.32786 42.562 1.2926 38.5267 1.2926 33.549V14.2354Z\" fill=\"#2EA3F9\" fill-opacity=\"0.15\"\/>\n\t\t\t\t\t<path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M18.5203 13.0838C19.0287 12.5755 19.8527 12.5757 20.3612 13.0838C20.8696 13.5922 20.8695 14.4162 20.3612 14.9246L13.6112 21.6756C13.1027 22.184 12.2778 22.184 11.7694 21.6756C11.7592 21.6661 11.748 21.6572 11.7381 21.6473L8.53693 18.4461C8.02892 17.9377 8.02881 17.1136 8.53693 16.6053C9.04535 16.0969 9.87031 16.0969 10.3787 16.6053L12.6883 18.9149L18.5203 13.0838Z\" fill=\"#F1F8FE\"\/>\n\t\t\t\t<\/svg>\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-text-group\">\n\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-title title-m\"><strong>Streamline<\/strong> compliance efforts<\/p>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-description text-body\">Manage your action plans, centralise your evidence, and structure your cybersecurity processes<\/p>\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"naaia-solutions-four-cards__card\" data-hover-icon>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-icon\">\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t<svg class=\"naaia-glass-new\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 56 56\" fill=\"none\" aria-hidden=\"true\">\n\t\t\t\t\t<defs>\n\t\t\t\t\t\t<linearGradient id=\"naaia-glass-new-grad\" x1=\"44.6043\" y1=\"9.92425\" x2=\"7.48587\" y2=\"46.6399\" gradientUnits=\"userSpaceOnUse\">\n\t\t\t\t\t\t\t<stop stop-color=\"#F1F8FE\"\/>\n\t\t\t\t\t\t\t<stop offset=\"1\" stop-color=\"#F1F8FE\" stop-opacity=\"0\"\/>\n\t\t\t\t\t\t<\/linearGradient>\n\t\t\t\t\t<\/defs>\n\t\t\t\t\t<circle class=\"naaia-glass-new__dot\" cx=\"20.0316\" cy=\"20.0316\" r=\"12.5457\" fill=\"#2EA3F9\"\/>\n\t\t\t\t\t<path d=\"M48.8989 42.8088C48.8989 46.1723 46.1723 48.8989 42.8088 48.8989L13.576 48.8989C10.2125 48.8989 7.48587 46.1723 7.48587 42.8088L7.48587 28.1924L17.8391 17.8391L28.1924 7.48586L42.8088 7.48587C46.1723 7.48587 48.8989 10.2125 48.8989 13.576L48.8989 42.8088Z\" fill=\"#2EA3F9\" fill-opacity=\"0.15\"\/>\n\t\t\t\t\t<path d=\"M42.8091 48.853L13.5757 48.853C10.2381 48.8528 7.53288 46.1467 7.53272 42.8091L7.53272 28.2114L17.8716 17.8716L28.2114 7.53271L42.8091 7.53271C46.1467 7.53288 48.8528 10.2381 48.853 13.5757L48.853 42.8091C48.8529 46.1467 46.1467 48.8529 42.8091 48.853Z\" stroke=\"url(#naaia-glass-new-grad)\" stroke-opacity=\"0.7\" stroke-width=\"0.0927573\"\/>\n\t\t\t\t\t<rect class=\"naaia-glass-new__cross-h\" x=\"14.478\" y=\"18.3024\" width=\"10.5504\" height=\"2.26081\" rx=\"1.1304\" fill=\"#F1F8FE\"\/>\n\t\t\t\t\t<rect class=\"naaia-glass-new__cross-v\" x=\"14.478\" y=\"18.3024\" width=\"10.5504\" height=\"2.26081\" rx=\"1.1304\" fill=\"#F1F8FE\"\/>\n\t\t\t\t<\/svg>\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t<div class=\"naaia-solutions-four-cards__card-text-group\">\n\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-title title-m\">Manage multiple <strong>frameworks<\/strong> in one platform<\/p>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<p class=\"naaia-solutions-four-cards__card-description text-body\">Monitor and manage your regulatory obligations from a single, always up-to-date source of truth.<\/p>\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<div class=\"naaia-solutions-four-cards__cta\">\n\t\t\t<a href=\"https:\/\/naaia.ai\/en\/get-a-demo\" class=\"naaia-solutions-four-cards__cta-btn\">\n\t\t\t\t\t\t\t\t<span class=\"naaia-solutions-four-cards__cta-btn-label\">\n\t\t\t\t\t<span class=\"naaia-solutions-four-cards__cta-btn-text\">Talk to our experts<\/span>\n\t\t\t\t\t<span class=\"naaia-solutions-four-cards__cta-btn-text\" aria-hidden=\"true\">Talk to our experts<\/span>\n\t\t\t\t<\/span>\n\t\t\t<\/a>\n\t\t<\/div>\n\t\t\n\t<\/div>\n\n<\/section>\n<\/div>\n\n\n\n<section style=\"background-image: url(&#039;https:\/\/naaia.ai\/wp-content\/themes\/naaia\/assets\/img\/background.svg&#039;);background-position: 50% 50%\" class=\"naaia-bg-simple alignfull wp-block-naaia-background-simple-bloc\">\n\n\t<div class=\"naaia-bg-simple__content\">\n\n\t\t\t\t<div class=\"naaia-bg-simple__tag\" aria-label=\"The future of AI governance starts here\">\n\t\t\t<span class=\"naaia-bg-simple__tag-dot\" aria-hidden=\"true\"><\/span>\n\t\t\t<span class=\"naaia-bg-simple__tag-text\">The future of AI governance starts here<\/span>\n\t\t<\/div>\n\t\t\n\t\t\t\t<h2 class=\"naaia-bg-simple__title title-xl\">Accelerate your AI transformation responsibly<\/h2>\n\t\t\n\t\t\t\t<p class=\"naaia-bg-simple__subtitle\">Discover how to deploy AI faster, safely, and at scale. Talk to our experts.<\/p>\n\t\t\n\t\t\t\t<a href=\"https:\/\/naaia.ai\/en\/get-a-demo\" class=\"naaia-bg-simple__button\">\n\t\t\t<img loading=\"lazy\" decoding=\"async\" class=\"naaia-bg-simple__button-icon\" src=\"https:\/\/naaia.ai\/wp-content\/themes\/naaia\/assets\/img\/icon-stars.svg\" alt=\"\" aria-hidden=\"true\" width=\"16\" height=\"16\">\n\t\t\t<span class=\"naaia-bg-simple__button-label\">\n\t\t\t\t<span class=\"naaia-bg-simple__button-label-text\">Get a demo<\/span>\n\t\t\t\t<span class=\"naaia-bg-simple__button-label-text\" aria-hidden=\"true\">Get a demo<\/span>\n\t\t\t<\/span>\n\t\t<\/a>\n\t\t\n\t<\/div>\n\n<\/section>\n\n\n\n<div class=\"naaia-other-regulations-wrapper section-dark wp-block-naaia-other-regulations\">\n<section class=\"naaia-other-regulations section-light section-rounded-top\">\n\n\t\t<div class=\"naaia-other-regulations__header\">\n\n\t\t\t\t<h2 class=\"naaia-other-regulations__title title-xl\">Learn about other regulations &amp; norms<\/h2>\n\t\t\n\t\t\n\t<\/div>\n\n\t\t\t<div class=\"naaia-other-regulations__list\">\n\n\t\t\t\t<a\n\t\t\tclass=\"naaia-other-regulations__card card-glass\"\n\t\t\thref=\"\/en\/nist-ai-rmf\"\n\t\t\t\t\t\t\t\t>\n\n\t\t\t\t\t\t<div class=\"naaia-other-regulations__card-text\">\n\t\t\t\t\t\t\t\t<p class=\"naaia-other-regulations__card-title\">NIST AI RMF<\/p>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<div class=\"naaia-other-regulations__icon naaia-other-regulations__icon--image\">\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/04\/image-7.svg\" alt=\"\" aria-hidden=\"true\" \/>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t<span class=\"naaia-other-regulations__arrow\" aria-hidden=\"true\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" aria-hidden=\"true\" focusable=\"false\">\n\t\t\t\t\t<path d=\"M23.6465 22.353L23.6465 9.35304C23.6465 8.80076 23.1988 8.35304 22.6465 8.35304L9.6465 8.35304\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t\t<path d=\"M22.457 10.1123L8.45705 24.1123\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t<\/svg>\n\t\t\t<\/span>\n\n\t\t<\/a>\n\t\t\t\t<a\n\t\t\tclass=\"naaia-other-regulations__card card-glass\"\n\t\t\thref=\"\/en\/eu-ai-act\"\n\t\t\t\t\t\t\t\t>\n\n\t\t\t\t\t\t<div class=\"naaia-other-regulations__card-text\">\n\t\t\t\t\t\t\t\t<p class=\"naaia-other-regulations__card-title\">EU AI Act<\/p>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<div class=\"naaia-other-regulations__icon naaia-other-regulations__icon--image\">\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/04\/ue.svg\" alt=\"\" aria-hidden=\"true\" \/>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t<span class=\"naaia-other-regulations__arrow\" aria-hidden=\"true\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" aria-hidden=\"true\" focusable=\"false\">\n\t\t\t\t\t<path d=\"M23.6465 22.353L23.6465 9.35304C23.6465 8.80076 23.1988 8.35304 22.6465 8.35304L9.6465 8.35304\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t\t<path d=\"M22.457 10.1123L8.45705 24.1123\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t<\/svg>\n\t\t\t<\/span>\n\n\t\t<\/a>\n\t\t\t\t<a\n\t\t\tclass=\"naaia-other-regulations__card card-glass\"\n\t\t\thref=\"\/en\/iso-iec-42001\"\n\t\t\t\t\t\t\t\t>\n\n\t\t\t\t\t\t<div class=\"naaia-other-regulations__card-text\">\n\t\t\t\t\t\t\t\t<p class=\"naaia-other-regulations__card-title\">ISO\/IEC 42001 <\/p>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<div class=\"naaia-other-regulations__icon naaia-other-regulations__icon--image\">\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/naaia.ai\/wp-content\/uploads\/2026\/04\/ue.svg\" alt=\"\" aria-hidden=\"true\" \/>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t<span class=\"naaia-other-regulations__arrow\" aria-hidden=\"true\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" aria-hidden=\"true\" focusable=\"false\">\n\t\t\t\t\t<path d=\"M23.6465 22.353L23.6465 9.35304C23.6465 8.80076 23.1988 8.35304 22.6465 8.35304L9.6465 8.35304\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t\t<path d=\"M22.457 10.1123L8.45705 24.1123\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t<\/svg>\n\t\t\t<\/span>\n\n\t\t<\/a>\n\t\t\n\t<\/div>\n\t\n<\/section>\n<\/div>\n\n\n\n<section class=\"naaia-faq section-light section-rounded-top alignfull wp-block-naaia-faq\">\n\n\t<div class=\"naaia-faq__bg\" aria-hidden=\"true\"><\/div>\n\n\t<h2 class=\"naaia-faq__title\">Frequently asked questions<\/h2>\n\n\t<ul class=\"naaia-faq__list\" role=\"list\">\n\t\t\t\t<li class=\"naaia-faq__item\">\n\t\t\t<details class=\"naaia-faq__details\">\n\t\t\t\t<summary class=\"naaia-faq__question\">\n\t\t\t\t\t<span class=\"naaia-faq__question-text\">Which products are covered by the Cyber Resilience Act, and which categories apply?<\/span>\n\t\t\t\t\t<span class=\"naaia-faq__chevron\" aria-hidden=\"true\">\n\t\t\t\t\t\t<svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n\t\t\t\t\t\t\t<path d=\"M4 6L8 10L12 6\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t\t\t<\/svg>\n\t\t\t\t\t<\/span>\n\t\t\t\t<\/summary>\n\t\t\t\t\t\t\t\t<div class=\"naaia-faq__answer\">\n\t\t\t\t\t<p>The CRA covers products with digital elements placed on the European Union market, whether hardware or software. The regulation applies to manufacturers, importers, distributors, authorized representatives, open-source software stewards, and modifying users, whether established within the European Union or outside it, provided that they make products with digital elements available on the European market. The CRA distinguishes several categories of products according to their level of criticality:<br \/>\n(1) Products with digital elements \u2013 subject to the essential cybersecurity and vulnerability management requirements set out in the regulation<br \/>\n(2) Important products of class I (for example, certain identity managers, password managers, or network equipment) \u2013 subject to enhanced assessment requirements before being placed on the market<br \/>\n(3) Important products of class II (for example, certain operating systems, firewalls, or critical platforms) \u2013 subject to stricter compliance mechanisms due to their potential impact on cybersecurity<br \/>\n(4) Critical products covered by specific harmonized acts or presenting a particularly high level of risk \u2013 subject to reinforced conformity assessment procedures involving, in some cases, a notified body.<\/p>\n<p>The applicable obligations therefore depend on the nature of the product, its role in the digital ecosystem, and its potential impact on users, organizations, and infrastructures.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/details>\n\t\t<\/li>\n\t\t\t\t<li class=\"naaia-faq__item\">\n\t\t\t<details class=\"naaia-faq__details\">\n\t\t\t\t<summary class=\"naaia-faq__question\">\n\t\t\t\t\t<span class=\"naaia-faq__question-text\">What are the main Cyber Resilience Act obligations for manufacturers of digital products?<\/span>\n\t\t\t\t\t<span class=\"naaia-faq__chevron\" aria-hidden=\"true\">\n\t\t\t\t\t\t<svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n\t\t\t\t\t\t\t<path d=\"M4 6L8 10L12 6\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t\t\t<\/svg>\n\t\t\t\t\t<\/span>\n\t\t\t\t<\/summary>\n\t\t\t\t\t\t\t\t<div class=\"naaia-faq__answer\">\n\t\t\t\t\t<p>Manufacturers of products with digital elements must meet several fundamental obligations throughout the product lifecycle, in particular:<\/p>\n<p>(1) Integrating cybersecurity by design and by default in order to reduce vulnerabilities from the earliest phases of development;<br \/>\n(2) Carrying out a cybersecurity risk assessment and implementing appropriate technical and organizational measures;<br \/>\n(3) Maintaining complete technical documentation demonstrating the product&#8217;s compliance with the requirements of the regulation;<br \/>\n(4) Setting up a vulnerability management process, including their identification, handling, and the distribution of the necessary patches;<br \/>\n(5) Ensuring post-market monitoring and surveillance in order to identify incidents and vulnerabilities affecting the product after it has been placed on the market and throughout the support period;<br \/>\n(6) Notifying actively exploited vulnerabilities and significant security incidents to the competent authorities within the timeframes set out in the regulation.<\/p>\n<p>Manufacturers must also provide clear information and instructions to users, ensure the availability of security updates for the defined support period, and be able to demonstrate their compliance to market surveillance authorities.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/details>\n\t\t<\/li>\n\t\t\t\t<li class=\"naaia-faq__item\">\n\t\t\t<details class=\"naaia-faq__details\">\n\t\t\t\t<summary class=\"naaia-faq__question\">\n\t\t\t\t\t<span class=\"naaia-faq__question-text\">How can organizations prepare for their CRA compliance?<\/span>\n\t\t\t\t\t<span class=\"naaia-faq__chevron\" aria-hidden=\"true\">\n\t\t\t\t\t\t<svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n\t\t\t\t\t\t\t<path d=\"M4 6L8 10L12 6\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n\t\t\t\t\t\t<\/svg>\n\t\t\t\t\t<\/span>\n\t\t\t\t<\/summary>\n\t\t\t\t\t\t\t\t<div class=\"naaia-faq__answer\">\n\t\t\t\t\t<p>With the CRA coming into effect progressively, organizations must start structuring their compliance approach now around several priority actions:<br \/>\n(1) Carrying out an inventory of products with digital elements in order to identify the products falling within the scope of the regulation and the operators concerned across the value chain;<br \/>\n(2) Classifying products according to their level of criticality in order to determine the applicable regulatory obligations and conformity assessment methods;<br \/>\n(3) Performing a gap analysis between the requirements imposed by the CRA and existing practices in secure development, vulnerability management, documentation, and surveillance;<br \/>\n(4) Defining a cross-functional cybersecurity governance, involving the product, quality, compliance, legal, and cybersecurity teams in order to clearly assign responsibilities;<br \/>\n(5) Setting up a compliance management platform allowing the centralization of evidence, the tracking of action plans, the documentation of risk assessments, and the management of the vulnerability lifecycle.<br \/>\nOrganizations that anticipate these requirements today will be able to demonstrate their compliance more effectively and secure the marketing of their products on the European market, while those that delay their preparation expose themselves to significant regulatory, operational, and financial risks.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/details>\n\t\t<\/li>\n\t\t\t<\/ul>\n\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":14,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-full-width","meta":{"footnotes":""},"class_list":["post-4390","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/pages\/4390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/comments?post=4390"}],"version-history":[{"count":5,"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/pages\/4390\/revisions"}],"predecessor-version":[{"id":4625,"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/pages\/4390\/revisions\/4625"}],"wp:attachment":[{"href":"https:\/\/naaia.ai\/en\/wp-json\/wp\/v2\/media?parent=4390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}