Feedback on CRA risk assessment guidance

Introduction 

Risk assessment is foundational within the Cyber Resilience Act (CRA), both as a practice and a deliverable. Risk assessment forms the basis of compliant products and informs the technical information supplied to users. Manufacturers need clear guidance, maintaining proportionality and allowing freedom in their risk assessment practices. In this paper, DIGITALEUROPE outlines suggestions for more clarity in the final guidelines.