# Understanding the CRA
**URL:** https://forums.balena.io/c/eu-cyber-resiliance-act-cra/understanding-cra/103.md
[Latest](https://forums.balena.io/latest.md) · [Categories](https://forums.balena.io/categories.md) · [Tags](https://forums.balena.io/tags.md)
---
## [What is the Cyber Resilience Act and why should we care?](https://forums.balena.io/t/what-is-the-cyber-resilience-act-and-why-should-we-care/374154)
**Author:** [@mpous](https://forums.balena.io/u/mpous)\
**Replies:** 6\
**Last updated:** [July 22, 2025, 9:06am UTC](https://forums.balena.io/t/what-is-the-cyber-resilience-act-and-why-should-we-care/374154 "2025-07-22T09:06:12Z")
The Cyber Resilience Act (CRA) is the EU’s new regulation aiming to make digital products — both hardware and software — more secure by design and throughout their lifecycle. It applies to nearly every connected product …
---
## [Class I vs. Class II: How to Know Where Your Product Fits](https://forums.balena.io/t/class-i-vs-class-ii-how-to-know-where-your-product-fits/374163)
**Author:** [@rmorillo24](https://forums.balena.io/u/rmorillo24)\
**Replies:** 3\
**Last updated:** [May 13, 2025, 3:01pm UTC](https://forums.balena.io/t/class-i-vs-class-ii-how-to-know-where-your-product-fits/374163 "2025-05-13T15:01:01Z")
The CRA introduces a two-tier system for “important” products with digital elements—Class I and Class II—as defined in Article 7 and detailed in Annex III of the regulation. Understanding the distinction is crucial beca…
---
## [🔍 What Is the EU Cyber Resilience Act and Who Needs to Comply?](https://forums.balena.io/t/what-is-the-eu-cyber-resilience-act-and-who-needs-to-comply/374186)
**Author:** [@rmorillo24](https://forums.balena.io/u/rmorillo24)\
**Replies:** 0\
**Last updated:** [May 5, 2025, 8:08am UTC](https://forums.balena.io/t/what-is-the-eu-cyber-resilience-act-and-who-needs-to-comply/374186 "2025-05-05T08:08:29Z")
If you make, sell, or update connected devices or software in the EU—you probably fall under the Cyber Resilience Act (CRA). The CRA is the EU’s new horizontal regulation setting mandatory cybersecurity requirements for…
---
## [Important dates to have in mind](https://forums.balena.io/t/important-dates-to-have-in-mind/374209)
**Author:** [@rmorillo24](https://forums.balena.io/u/rmorillo24)\
**Replies:** 0\
**Last updated:** [May 7, 2025, 10:30am UTC](https://forums.balena.io/t/important-dates-to-have-in-mind/374209 "2025-05-07T10:30:54Z")
Dates affecting you 11 December 2025 To help economic operators perform their product classification, the European Commission will adopt technical descriptions of the categories of products with digital elements. (Articl…
---
## [Substantial Modification: Examples and Grey Areas](https://forums.balena.io/t/substantial-modification-examples-and-grey-areas/374172)
**Author:** [@rmorillo24](https://forums.balena.io/u/rmorillo24)\
**Replies:** 0\
**Last updated:** [May 2, 2025, 10:42am UTC](https://forums.balena.io/t/substantial-modification-examples-and-grey-areas/374172 "2025-05-02T10:42:29Z")
Let’s talk about substantial modifications—one of the trickier concepts in the CRA. According to Article 3(30) of the Cyber Resilience Act, a “substantial modification” is a change to a product with digital elements aft…
---
## [Is my product covered by CRA?](https://forums.balena.io/t/is-my-product-covered-by-cra/374162)
**Author:** [@rmorillo24](https://forums.balena.io/u/rmorillo24)\
**Replies:** 0\
**Last updated:** [May 2, 2025, 8:46am UTC](https://forums.balena.io/t/is-my-product-covered-by-cra/374162 "2025-05-02T08:46:47Z")
The CRA applies to almost everything with a chip or a bit of code that connects to something. It targets “products with digital elements” —that includes both hardware and software (including SaaS) that can connect, even …