---
title: "Cyber Resilience Act"
description: "Product security requirements, CE marking, and vulnerability handling under the CRA."
canonical: https://www.orbiqhq.com/eu-regulations/cra
html: https://www.orbiqhq.com/eu-regulations/cra
publisher: Orbiq GmbH
language: en
---
# Cyber Resilience Act

Product security requirements, CE marking, and vulnerability handling under the CRA.

- [Cyber Resilience Act (CRA): 2026 Compliance Guide](/eu-regulations/cyber-resilience-act.md) - The EU Cyber Resilience Act explained: mandatory requirements for products with digital elements, CE marking, SBOM duties and the September 2026 deadline.
- [Cyber Resilience Act Art. 13 & 14: Why an ISMS Isn't Enough](/eu-regulations/cyber-resilience-act-article-13-14.md) - The CRA requires Security by Design, vulnerability reporting within 24 hours, SBOMs, and CE marking. An ISMS supports governance, but not product-level compliance.