Selling into the EU — Does That Automatically Mean CRA? Start with Product Scope

Not every product sold into the EU falls under the Cyber Resilience Act (CRA). A four-step scope determination, with case studies on semiconductors, wireless communication modules, SaaS, and automotive T-Boxes — plus why “covered by the RED” doesn’t mean “excluded from the CRA.”

Not every product sold into the EU falls under the Cyber Resilience Act. This article sets out a four-step scope determination, worked through case studies on semiconductors, wireless communication modules, SaaS and automotive T-Boxes — and explains why being covered by the RED does not mean being excluded from the CRA.

Read the full article on SV Surveillance Lab →