Official material
Guidance, mapped to the law
What the Commission and ENISA have published about the Cyber Resilience Act — always labelled for what it is. Guidance explains; it does not amend the Regulation.
| Source | Publisher | Status |
|---|---|---|
| European Commission — Cyber Resilience Act policy page | European Commission | informational |
| European Commission — CRA implementation hub | European Commission | informational |
| European Commission — CRA implementation guidance (published 27 July 2026) | European Commission | guidance |
| European Commission — CRA implementation FAQ | European Commission | faq |
| European Commission — CRA reporting obligations page | European Commission | informational |
| ENISA — Single Reporting Platform (SRP) | ENISA | informational |
| ENISA — Single Reporting Platform FAQ | ENISA | faq |
Binding instruments (the Regulation and implementing acts) live under Regulation and Sources. This page lists non-binding official material.