NA 043

DIN Standards Committee Information Technology and IT Applications

Project

Guidance for the application of EN 18037 in support of the CRA

Abstract

The deliverable of the proposed work item is a Technical Specification “Guidance for the application of EN 18037 in support of the CRA” that provides guidance for the application of EN 18037 for sectoral risk- and cybersecurity assessments, in particular addressing obligations of product manufacturers stipulated by the CRA. This includes:  Guidance for sectoral stakeholders conducting sectoral assessments according to EN 18037 to provide results that serve the needs of ICT product manufacturers, in particular with regard to their obligations set out in the CRA.  Adaptation of the EN 18037 methodology for use by ICT product manufacturers. In case no assessment results from sectoral stakeholders should be available, product manufacturers should be enabled to carry out their own assessments of product-related threats, risks and associated cybersecurity and trust requirements for the intended uses of their products in the targeted market sectors.

Begin

2025-08-28

WI

JT013099

Planned document number

prCEN/CLC/TS XXX

Responsible national committee

NA 043-04-13 GA - DIN/DKE Joint working committee Cybersecurity  

Responsible european committee

CEN/CLC/JTC 13/WG 6 - Product security  

Contact

Martin Uhlherr

Am DIN-Platz, Burggrafenstr. 6
10787 Berlin

Tel.: +49 30 2601-2591
Fax: +49 30 2601-42591

Send message to contact