Cyber Resilience Act22 Aug 2026
ENISA published a report on the high-level technical competences that conformity assessment bodies will need to be notified under the Cyber Resilience Act, in particular experience and training requirements for auditors and evaluators. ENISA notes that these must be complemented by competences specific to the harmonised standards still under development.
What to do: No direct compliance action for manufacturers; context only. Conformity assessment bodies seeking CRA notification should compare their staff competence and training with the report.
Legal status: EU guidance · Jurisdiction: EU
Official source: ENISA ↗