Access Alert: European Institutions reach trilogue agreement on Cyber Resilience Act

Access Alert: European Institutions reach trilogue agreement on Cyber Resilience Act

Co-legislators in the EU institutions reached a trilogue agreement on the proposal for a Cyber Resilience Act following a late-night meeting on Thursday 30 November. The proposed regulation introduces horizontal cybersecurity requirements for products with digital elements to prevent cyber vulnerabilities on the market. These requirements include vulnerability reporting, keeping security updates available, and ensuring supply chain security.

The newly agreed text clarifies that manufacturers of digital products will need to provide security support for five years and keep updates publicly available for ten years, as well as conduct a risk assessment that will inform which security requirements are applicable to their product. The reporting requirements are a key change from previous drafts to the new dual approach in the agreed text. Manufacturers must inform the EU Cybersecurity Agency (ENISA) in addition to Member State authorities via a single reporting platform, reflecting the deal struck between the European Parliament and Council to resolve the conflict of competence.

The text will be now formally approved in the European Parliament and Council, after which it will be published in the EU Official Journal and passed into law. Requirements under the legislation will begin to apply in early 2027.

Cyber-attacks are among the fastest-growing forms of crime worldwide in terms of scale, cost, and sophistication. New regulations like the Cyber Resilience Act drive organisations to address their compliance roadmap and optimise their cybersecurity awareness. If you are interested in learning more about EU cybersecurity policy, please contact Mark Smitham at [email protected] or Rory Gilliland at [email protected].

Related Articles

The Saturation Point: Charting the Limits of Artificial Intelligence

The Saturation Point: Charting the Limits of Artificial Intelligence

It is postulated that AI’s rapid growth is constrained by its massive energy consumption. Training large models like GPT-3 can...

3 Jul 2025 Opinion
A New Horizon for Telecommunications in Mexico: The Telco Reform

A New Horizon for Telecommunications in Mexico: The Telco Reform

The Senate approved the new Telecommunications Law, as well as the reforms to the Federal Economic Competition Law, during an...

2 Jul 2025 Opinion
Access Alert: Takeaways from ITU Council Meeting 2025

Access Alert: Takeaways from ITU Council Meeting 2025

2025 marks the 160th anniversary of the International Telecommunications Union (ITU), the United Nations body responsible for coordinating global telecommunication...

2 Jul 2025 Opinion
Access Alert: Pioneering Pakistan’s Space Future: PSARB and Access Partnership Host High-Level Week of Engagements in Islamabad

Access Alert: Pioneering Pakistan’s Space Future: PSARB and Access Partnership Host High-Level Week of Engagements in Islamabad

Last week, the Pakistan Space Activities Regulatory Board (PSARB), together with Access Partnership in its role as appointed consultant, organised...

30 Jun 2025 Opinion