Cyber Resilience Act (CRA)

The EU Cyber Resilience Act (Regulation (EU) 2024/2847) establishes cybersecurity requirements for products with digital elements made available on the EU market. Based on its assessment to date, LEM has identified the following product families as potentially including products within the scope of the CRA: CAB | CDSR | CDT | DCBM | DCES | TEMA4G | HLSR | HMSR | HOF | HO | HOYL | HOYS.

LEM is implementing measures to address the CRA requirements applicable to relevant products, including secure product development, vulnerability handling, security updates where required, technical documentation and information to users.

CRA reporting obligations under Article 14 apply from 11 September 2026, and the Regulation will apply generally from 11 December 2027.

The inclusion of a product family above does not mean that every product, model or configuration within that family falls within the scope of the CRA, nor does it constitute a declaration or certification of compliance. CRA applicability and compliance status are assessed at individual product level.

Further information

For questions regarding a specific LEM product, security updates or vulnerability reporting, please contact your LEM technical contact or LEM Product Cybersecurity / PSIRT: productsecurity@lem.com