Source: OJ L 2024/2847, 20.11.2024Current language: EN
- Cyber resilience for products with digital elements
Basic legislative acts
- CRA regulation
Annex III IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS
Class I
Identity management systems and privileged access management software and hardware, including authentication and access control readers, including biometric readers
Standalone and embedded browsers
Password managers
Software that searches for, removes, or quarantines malicious software
Products with digital elements with the function of virtual private network (VPN)
Network management systems
Security information and event management (SIEM) systems
Boot managers
Public key infrastructure and digital certificate issuance software
Physical and virtual network interfaces
Operating systems
Routers, modems intended for the connection to the internet, and switches
Microprocessors with security-related functionalities
Microcontrollers with security-related functionalities
Application specific integrated circuits (ASIC) and field-programmable gate arrays (FPGA) with security-related functionalities
Smart home general purpose virtual assistants
Smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems
Internet connected toys covered by Directive 2009/48/EC of the European Parliament and of the Council(1)Directive 2009/48/EC of the European Parliament and of the Council of 18 June 2009 on the safety of toys (OJ L 170, 30.6.2009, p. 1). that have social interactive features (e.g. speaking or filming) or that have location tracking features
Personal wearable products to be worn or placed on a human body that have a health monitoring (such as tracking) purpose and to which Regulation (EU) 2017/745 or (EU) No 2017/746 do not apply, or personal wearable products that are intended for the use by and for children
Class II
Hypervisors and container runtime systems that support virtualised execution of operating systems and similar environments
Firewalls, intrusion detection and prevention systems
Tamper-resistant microprocessors
Tamper-resistant microcontrollers
Relevant recitals
Recital 45 Core functionality of important products
Important products with digital elements as referred to in this Regulation should be understood as products which have the core functionality of a category of important products with digital elements that is set out in this Regulation. For example, this Regulation sets out categories of important products with digital elements which are defined by their core functionality as firewalls or intrusion detection or prevention systems in class II. As a result, firewalls and intrusion detection or prevention systems are subject to mandatory third-party conformity assessment. This is not the case for other products with digital elements not categorised as important products with digital elements which may integrate firewalls or intrusion detection or prevention systems. The Commission should adopt an implementing act to specify the technical description of the categories of important products with digital elements that fall under classes I and II as set out in this Regulation.
Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.