SolarPower Europe Position Paper on the Cyber Resilience Act (CRA)
Streamline conformity assessment. Enforce intellectual property protection. Exercise due diligence. Extend timeline for reporting obligations
Read the position paper now
SolarPower Europe welcomes the Cyber Resilience Act, which establishes high cybersecurity requirements, and common guidelines for all manufacturers – in particular inverter manufacturers. However, we would like to recommend several amendments to further increase the consistency and effectiveness of the Commission's proposal.
Third-party assessments
The conformity assessment procedure must be streamlined, clarified, transparent and time-bound.
Intellectual property
The protection of intellectual property should be enforced.
Due diligence
The requirement to exercise due diligence must be specified.
Security
The EU must specify security requirements for products with digital elements in Annex I.
Timeline
The timeline for reporting obligations should be extended to 72 hours.
Vulnerability handling
Regulators should extend vulnerability management requirements beyond 5 years
Interested in becoming a member?
Why become a member?
Do you want to stay up-to-date about solar energy?
