The European Commission has published official guidelines for the application of the Cyber Resilience Act (CRA), helping manufacturers, suppliers, and open-source projects better understand how the law should be applied in practice. The guidance clarifies when software, hardware, and combinations thereof fall under the CRA and when software is considered to be “placed on the […]

