> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# EU Cyber Resilience Act

> Meet EU cybersecurity requirements for products with digital elements.

> Meet EU cybersecurity requirements for products with digital elements.

The EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements placed on the EU market. It imposes obligations on manufacturers across the product lifecycle — secure design, vulnerability handling, and incident reporting — backed by CE marking.

<Note>
  The CRA applies to manufacturers, importers, and distributors of hardware and software products with digital elements sold in the EU.
</Note>

## Who needs EU Cyber Resilience Act?

<CardGroup cols={2}>
  <Card title="Product manufacturers" icon="microchip">
    Makers of connected hardware and software products sold in the EU.
  </Card>

  <Card title="Software vendors" icon="code">
    Companies placing software products with digital elements on the EU market.
  </Card>
</CardGroup>

## Key components

<CardGroup cols={3}>
  <Card title="Secure by design" icon="shield-halved">
    Cybersecurity built into products from the design phase.
  </Card>

  <Card title="Vulnerability handling" icon="bug">
    Processes to identify, document, and remediate vulnerabilities.
  </Card>

  <Card title="Incident reporting" icon="bell">
    Report actively exploited vulnerabilities and incidents to authorities.
  </Card>

  <Card title="CE marking" icon="certificate">
    Conformity assessment and CE marking for compliant products.
  </Card>
</CardGroup>

## How DSALTA helps with EU Cyber Resilience Act

<Steps>
  <Step title="Activate EU CRA">
    Select the EU Cyber Resilience Act from the Frameworks page. DSALTA maps requirements to controls.
  </Step>

  <Step title="Review product controls">
    Review secure design and vulnerability handling controls and assign owners.
  </Step>

  <Step title="Collect evidence automatically">
    Connect integrations to gather vulnerability and security evidence.
  </Step>

  <Step title="Approve policies">
    Review and approve secure development and disclosure policies.
  </Step>

  <Step title="Prepare conformity documentation">
    Organize evidence for conformity assessment and CE marking.
  </Step>
</Steps>

## Frequently asked questions

<AccordionGroup>
  <Accordion title="What products are covered?" icon="boxes-stacked">
    Products with digital elements — connected hardware and software — placed on the EU market, with stricter rules for critical products.
  </Accordion>

  <Accordion title="What are the reporting obligations?" icon="bell">
    Manufacturers must report actively exploited vulnerabilities and severe incidents to authorities within defined timelines.
  </Accordion>
</AccordionGroup>

## Related pages

* [Active Frameworks](/guides/compliance/frameworks-active)
* [Available Frameworks](/guides/compliance/frameworks-available)
* [Controls](/guides/compliance/controls)
* [Audits](/guides/compliance/audits)