Cyber Resilience Act
How does the Cyber Resilience Act relate to automotive cybersecurity?
LAST REVIEWED
- Type-approved vehicles: UN R155 and UN R156 apply; the equivalent CRA obligations do not.
- Aftermarket and accessory connected products: assess CRA applicability per product, including SBOM, vulnerability handling and support period.
- Suppliers frequently sit in both regimes at once and need one lifecycle producing both evidence sets.
Want this answered for your product?
The scope checker gives you a documented read in a few minutes, including a full PDF.