Summary

The EU Cyber Resilience Act (CRA) includes provisions and measures to support microenterprises and small and medium-sized enterprises (SMEs) during the transition period, ensuring they can effectively adapt to the new regulatory requirements without undue burden.

Relevant CRA Provisions

Detailed Explanation

The CRA aims to facilitate the transition for microenterprises and SMEs by providing specific support measures. Member States are encouraged to organize awareness-raising and training activities, establish dedicated communication channels, and support testing and conformity assessment activities. The Commission is tasked with publishing guidance to assist economic operators, with a particular focus on SMEs. This guidance will cover the scope of the Regulation, support periods, and the concept of substantial modification. Additionally, the Commission will maintain an easy-to-access list of delegated and implementing acts. To ensure a smooth application of the Regulation, Member States should ensure the availability of notified bodies and consider funding initiatives to alleviate conformity assessment costs for SMEs. The Commission will also establish a simplified technical documentation form for microenterprises and small enterprises to reduce administrative burdens.

Obligations for Stakeholders

Manufacturers, Distributors, Importers, and Open Source Software Stewards:

  • Prepare for the application of the CRA by familiarizing themselves with the guidance provided by the Commission, particularly focusing on the scope, support periods, and substantial modifications.
  • Utilize the simplified technical documentation form if they are microenterprises or small enterprises to reduce administrative burdens.
  • Engage with Member States’ dedicated communication channels for advice and queries regarding the implementation of the Regulation.
  • Participate in awareness-raising and training activities organized by Member States to better understand and comply with the new requirements.
  • Consider the availability of funding initiatives at Union and national levels to alleviate the costs associated with third-party conformity assessments.