Get ready for the Cyber Resilience Act (CRA) with BSI
The EU CRA changes how you design, build and support products with digital elements. Register your interest, and we'll keep you informed as our CRA offering develops.
The CRA sets cybersecurity requirements for products with digital elements sold in the EU. Reporting obligations have applied since 11 September 2026. With most other requirements applying from 11 December 2027, you have time to plan your route to compliance.
BSI holds pre-accreditation from the Dutch Accreditation Council (RvA), as of 3 November 2026. It covers ISO/IEC 17065 and 17021 for CRA Modules B and H and allows for evaluation of all product categories: Default, Important Class I and Class, and Critical. We'll share updates publicly on service availability as our accreditation progresses. Would you like updates in your inbox? Or would you prefer a chat with our team about our technical review service or pilot testing scheme? Tell us how you'd like to hear from us below and we'll take it from there.*
Option A – Keep me updated; Get CRA news, guidance, and accreditation updates
Option B – Share your products and plans, join our pilot testing scheme, or ask about our technical review service
*Registering your interest doesn't create an agreement for BSI to provide services.
