Global Tech Association ITI Offers Recommendations to Enhance Harmonized European Cybersecurity Legislation
BRUSSELS – In a paper submitted to the European Commission yesterday, global tech trade association, ITI, the Information Technology Industry Council, offered recommendations on how the European Cyber Resilience Act (CRA) can be further developed to ensure a harmonized European cybersecurity baseline for products with digital elements.
“ITI supports the European Union’s efforts to improve cybersecurity by creating common, essential cybersecurity requirements in the Cyber Resilience Act (CRA)”, saidGuido Lobrano, ITI’s Director General for Europe. “For the CRA to be effective, it needs to offer a horizontal, phased, and truly risk-based approach where products with digital elements are classified based on their criticality. The CRA should build on existing legislation and leverage industry-driven standards for conformity assessments. Legislators should further consider the relationship between finished products and components and clearly exclude services from the scope. These improvements will help ensure that the CRA effectively uplifts the cybersecurity of connected products across the European Single Market.”
In its comments, ITI also encourages legislators to ensure that the CRA is consistent with requirements under existing cybersecurity regulations, like NIS 2, and to clarify the relationship between conformity assessment requirements under the CRA and cybersecurity certification schemes stemming from the Cybersecurity Act to prevent further fragmentation.
On 8 September 2022, ITI held its first ITInsights LIVE Briefing on the potential opportunities and challenges of the European Cyber Resilience Act for the EU tech industry and the global digital economy. Watch the discussion here.
You can read ITI’s comments here.
###
Related News & Analysis
Why an AI ‘Kill Switch’ isn’t a Catch-all Solution
AI is Supercharging Cyber Threats. Defenders Need New Tools and Partnerships.
