Cyber Resilience Act
Regulation (EU) 2024/2847
Classify your product with digital elements and get the security duties and CE route.
Reporting from 11 Sep 2026; full rules 11 Dec 2027
Entered into force 10 Dec 2024. Vulnerability and incident reporting applies 11 Sep 2026; the main obligations and CE marking apply 11 Dec 2027.
What this skill does
Checks whether your product is in scope, classifies it (default, important class I or II, or critical), runs the essential and vulnerability-handling requirements, assigns a conformity route and CE marking, and sets up the reporting duties.
Who it is for: Product, engineering and security leads at hardware and software makers placing connected products on the EU market.
The guided flow
- 1Applicability and role check (product with digital elements; manufacturer, importer or distributor)
- 2Classify the product (default, important class I or II, critical)
- 3Essential requirements and vulnerability-handling gap check
- 4Conformity assessment route, CE marking and documentation
- 5Set up reporting, support period and SBOM, then a dated plan
What it asks you for
- What the product is and whether it connects or processes data
- Your role and where it is sold
- Your current security and update practices
What you get back
- A product classification
- A requirements gap list and conformity route
- A reporting setup and dated action plan
Install it in your assistant
In Claude
- Download the SKILL.md above, or copy its raw URL.
- Upload the file to a Claude conversation (or add it as a Skill / Project knowledge).
- Say: Walk me through Cyber Resilience Act compliance.
In ChatGPT
- Create a Project (or a new chat) and upload the SKILL.md, or paste its contents.
- Say: Use this skill to check if CRA applies to us.
- Answer the questions it asks, one short batch at a time.
In an AI agent (autonomous)
Point the agent at the raw file and load it as a system instruction:
curl https://regulatory-skills.com/skills/cra/SKILL.md
The full catalog is in /llms.txt. See the agent install guide.
Guidance, not legal advice
This skill helps you get organised and points you at the official sources. It does not replace a qualified adviser. Confirm specifics against the text on EUR-Lex and the European Commission before you act. See the verified fact sheet that ships with the skill for sources.