Supported standards

Annex I product and vulnerability-handling requirements, plus the technical documentation you must keep.

Article 21 risk-management measures and Article 23 reporting obligations for essential and important entities.

German technical guideline on cyber resilience requirements and SBOM.

The de facto reference for a secure development lifecycle in industrial contexts, and increasingly cited beyond OT as the most mature SDL standard, with certifiability.

The automotive equivalent, mandatory in practice via UNECE R155.

Health-software lifecycle, harmonized under the MDR pathway.

Technical requirements for embedded devices, network components, host devices and applications (CR / EDR / NDR / HDR structure).

The harmonized route for RED 3.3(d)/(e)/(f); the CRA generic technical-requirements standard is being built on EN 18031, augmented with additional controls.

Consumer-IoT baseline; feeds into the ETSI vertical CRA drafts.

System security requirements — SL-T per zone.

Risk assessment and zone & conduit requirements (ZCR).