Cyber Resilience Act: Seizing Opportunities, Mitigating Risks

The Cyber Resilience Act (CRA) establishes a new European standard for the cybersecurity of connected products. While the ZVEI supports this goal, the current legal framework poses considerable challenges. From December 2027, all products, including existing models, must comply with the CRA. For many companies, this will require significant technical adjustments that will be difficult to implement in the short term.

Without targeted adjustments, there is a risk of significant supply chain disruption, including production stoppages and site relocation. The aim must be to turn the CRA into a robust, innovation-friendly and realistic set of rules. Our position paper outlines the way forward.

Download the ZVEI position paper „Strengthening cybersecurity, securing supply chains and innovation“ here .