prCEN/CLC/TS XXX

Guidance for the application of EN 18037 in support of the CRA prCEN/CLC/TS XXX

Scope

The deliverable of the proposed work item is a Technical Specification “Guidance for the application of EN 18037 in support of the
CRA” that provides guidance for the application of EN 18037 for sectoral risk- and cybersecurity assessments, in particular addressing
obligations of product manufacturers stipulated by the CRA. This includes:
 Guidance for sectoral stakeholders conducting sectoral assessments according to EN 18037 to provide results that
serve the needs of ICT product manufacturers, in particular with regard to their obligations set out in the CRA.
 Adaptation of the EN 18037 methodology for use by ICT product manufacturers. In case no assessment results
from sectoral stakeholders should be available, product manufacturers should be enabled to carry out their own
assessments of product-related threats, risks and associated cybersecurity and trust requirements for the intended
uses of their products in the targeted market sectors.

Related legislation

Legislation related to this standard