Security

EU CRA Enters Full Effect on the 11th...gien Offers 'Free Product Security Check' for Connected Manufacturers

TECHWORLD ·

[Photo: Jien]

✦ AI Summary

As the vulnerability reporting obligations under the EU Cyber Resilience Act (CRA) took full effect starting today, manufacturers supplying products to the EU market face a heavier reporting burden.

Gien said on the 11th that it will carry out a 'free product security check' for domestic connected product manufacturers.

Applications for the check will be accepted on the company's website through October 31 and processed in the order received, with SBOM, HBOM, and AIBOM identification, vulnerability materials, a CRA readiness score, and a CycloneDX file provided.

As the vulnerability reporting obligations under the EU Cyber Resilience Act (CRA) took full effect starting today, manufacturers supplying products to the EU market face a heavier reporting burden. Manufacturers supplying the EU market now need a stricter reporting system, and if they become aware of a vulnerability being exploited in their products, they must report it to the authorities within 24 hours.

In response, gien announced on the 11th that it would launch a 'free product security check.' The program was introduced to address the vulnerability reporting obligations under the EU Cyber Resilience Act (CRA), and the free product security check is aimed at domestic connected product manufacturers.

Any connected product manufacturer can apply, and applications will be accepted on the company's website through October 31. The checks will be conducted in the order applications are received.

The check identifies components inside a product's firmware, with identification units covering software (SBOM), hardware (HBOM), and AI (AIBOM). Deliverables include materials summarizing known security vulnerabilities, a summary report that includes a CRA readiness score, and a submission file (CycloneDX).

The CRA reporting obligations apply across internet-connected products such as IoT, home appliances, industrial devices, robots, and medical devices, and they are applied retroactively to include not only products to be launched in the future but also products already placed on the market.

As this regulatory rollout begins, Joo Young-min, CEO of gien, said many manufacturers do not know the components of their own products. Joo said gien has the technical capability to actually identify vulnerabilities in robots and electric vehicle chargers, and added that the company intends to help manufacturers identify vulnerabilities in their products in advance, before they respond to the regulation.

Source: TECHWORLD · Kim Hye-jin
Original: https://www.epnc.co.kr/news/articleView.html?idxno=406830

References

This article was produced with the help of an automated content generation algorithm.


Source: TECHWORLD

View original

This article was summarized and organized by BizCrush based on the original article from TECHWORLD. For exact quotations and full details, please refer to the original article.