Blog explains new EU rules governing CE-marking

Direct Insight, the UK-based technical systems integrator and reseller of system-on-module (SoM) and other embedded systems has published a ‘101’ to assist embedded developers to understand new EU legislation which will require companies to consider the cyber security of any products that carry the CE mark. The EU Cyber Resilience Act (CRA)  will  become EU law this year, and non-compliance penalties start at €15m.

Commented David Pashley, CEO of Direct Insight: “Even with many years of experience in developing secure systems, the CRA is a complex, 338-page document. But If you normally CE mark your products in order to sell them in the EU, then your products must comply, no matter where you are based.”

The most pressing items to consider are secure boot, and a secure update process (ideally OTA), as these may be difficult features to add retrospectively. Full details and a clear explanation of the CRA are provided in a new blog – the first of a series –  https://blogs.directinsight.co.uk/eu-cyber-resilience-act-101-for-embedded-developers/.

About Direct Insight

The increasing complexity of electronics hardware and software has the potential to increase project timescales, yet at the same time most development teams are faced with ever more demanding time-to-market pressures. Founded in 1992, UK value-added reseller, systems integrator and compliance specialist, Direct Insight has helped hundreds of development teams to upgrade to the latest SoC, FPGA and OS technology by choosing the right off-the-shelf hardware, software and tools, by providing the required support and services to fill the gaps, and by allowing customer development teams to focus on their differentiating core skills to deliver excellent products. Key partners include: OS supplier, QNX; Ka-Ro Electronics, the German designer and manufacturer of embedded modules; ITTIA high performance data management, and most recently, German SoM producer, MicroSys Electronics.