Post

Daniel Ehrenberg
@littledan.dev

The Cyber Resilience Act mandates that commercial software handle vulnerabilities well. What does that mean exactly? The CRA names sound principles in Annex I Part II, but applying them in practice is another thing.

Daniel Ehrenberg
@littledan.dev

For this reason, there's an ongoing standardization effort translate these principles into more clear requirements to meet, to make it easier to demonstrate compliance.

0 reposts1 like

Daniel Ehrenberg
@littledan.dev

The draft standard now entering a public review phase, so *we need your opinions, thoughts and analysis to improve it*. This article explains where things are, and how to get involved. www.agoria.be/en/services/...

agoria.bePublic enquiry concerning the new draft standard prEN 40000-1-3 ‘Vulnerability Handling’, in support of the Cyber Resilience ActThe public enquiry concerning the prEN 40000-1-3 standard entitled ‘Cybersecurity requirements for products with digital elements – Vulnerability Handling’ has been published on the NBN website. This ...