Cyber Resilience Act Explorer · interactive view

Annex III - IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS

ANNEX III 
 IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS 
 Class I 
 
 
 
 
 
 
 
 
 1. 
 
 
 Identity management systems and privileged access management software and hardware, including authentication and access control readers, including biometric readers 
 
 
 
 
 
 
 
 
 
 
 
 
 2. 
 
 
 Standalone and embedded browsers 
 
 
 
 
 
 
 
 
 
 
 
 
 3. 
 
 
 Password managers 
 
 
 
 
 
 
 
 
 
 
 
 
 4. 
 
 
 Software that searches for, removes, or quarantines malicious software 
 
 
 
 
 
 
 
 
 
 
 
 
 5. 
 
 
 Products with digital elements with the function of virtual private network (VPN) 
 
 
 
 
 
 
 
 
 
 
 
 
 6. 
 
 
 Network management systems 
 
 
 
 
 
 
 
 
 
 
 
 
 7. 
 
 
 Security information and event management (SIEM) systems 
 
 
 
 
 
 
 
 
 
 
 
 
 8. 
 
 
 Boot managers 
 
 
 
 
 
 
 
 
 
 
 
 
 9. 
 
 
 Public key infrastructure and digital certificate issuance software 
 
 
 
 
 
 
 
 
 
 
 
 
 10. 
 
 
 Physical and virtual network interfaces 
 
 
 
 
 
 
 
 
 
 
 
 
 11. 
 
 
 Operating systems 
 
 
 
 
 
 
 
 
 
 
 
 
 12. 
 
 
 Routers, modems intended for the connection to the internet, and switches 
 
 
 
 
 
 
 
 
 
 
 
 
 13. 
 
 
 Microprocessors with security-related functionalities 
 
 
 
 
 
 
 
 
 
 
 
 
 14. 
 
 
 Microcontrollers with security-related functionalities 
 
 
 
 
 
 
 
 
 
 
 
 
 15. 
 
 
 Application specific integrated circuits (ASIC) and field-programmable gate arrays (FPGA) with security-related functionalities 
 
 
 
 
 
 
 
 
 
 
 
 
 16. 
 
 
 Smart home general purpose virtual assistants 
 
 
 
 
 
 
 
 
 
 
 
 
 17. 
 
 
 Smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems 
 
 
 
 
 
 
 
 
 
 
 
 
 18. 
 
 
 Internet connected toys covered by Directive 2009/48/EC of the European Parliament and of the Council [1] that have social interactive features (e.g. speaking or filming) or that have location tracking features 
 
 
 
 
 
 
 
 
 
 
 
 
 19. 
 
 
 Personal wearable products to be worn or placed on a human body that have a health monitoring (such as tracking) purpose and to which Regulation (EU) 2017/745 or (EU) No 2017/746 do not apply, or personal wearable products that are intended for the use by and for children 
 
 
 
 
 Class II 
 
 
 
 
 
 
 
 
 1. 
 
 
 Hypervisors and container runtime systems that support virtualised execution of operating systems and similar environments 
 
 
 
 
 
 
 
 
 
 
 
 
 2. 
 
 
 Firewalls, intrusion detection and prevention systems 
 
 
 
 
 
 
 
 
 
 
 
 
 3. 
 
 
 Tamper-resistant microprocessors 
 
 
 
 
 
 
 
 
 
 
 
 
 4. 
 
 
 Tamper-resistant microcontrollers 
 
 
 
 
 
 
 ( 1 )  Directive 2009/48/EC of the European Parliament and of the Council of 18 June 2009 on the safety of toys ( OJ L 170, 30.6.2009, p. 1 ).

Source: Regulation (EU) 2024/2847 (Cyber Resilience Act), consolidated EN text (OJ L, 2024/2847, 20.11.2024; Official Journal of the EU). This page is AI-generated legal information, not legal advice. Verify against the Official Journal. Contact: yiango@proton.me