{
  "node_id": "eu-cyber-resilience-act-2024-2847-product-security-requirements",
  "title": "EU Cyber Resilience Act (CRA) 2024/2847 - Cybersecurity Requirements for Products with Digital Elements and Vulnerability Handling",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-10",
  "bluf": "Regulation (EU) 2024/2847 establishes mandatory cybersecurity requirements for hardware and software products with digital elements placed on the EU market. Manufacturers must implement security by design, default secure configurations, vulnerability handling processes, and report actively exploited vulnerabilities to ENISA and national CSIRTs within 24 hours. CE marking required. Fines up to EUR 15M or 2.5% of worldwide turnover.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "iso_standard",
      "regulation_reference",
      "framework_alignment",
      "industry_mapping"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "eu-nis2-directive-2022-2555-cybersecurity-essential-entities"
  ],
  "primary_citations_count": 6
}