EU AGREES ON RULES TO PROTECT SMART DEVICES

Summary from the TLDR InfoSec newsletter

A joint EU commission has adopted the Cyber Resilience Act, which sets out cybersecurity requirements for the design, development, production, and sale of hardware or software products. Manufacturers will be required to assess the cybersecurity of their devices, provide declarations of conformity, and take appropriate action to remediate vulnerabilities for the device’s expected lifetime or a minimum of 5 years.