Skip to main content

The European Telecommunications Standards Institute (ETSI) has released the following draft standards related to the Cyber Resilience Act:

  • EN 304 617 – Cybersecurity requirements for browsers
  • EN 304 618 – Cybersecurity requirements for password managers
  • EN 304 619 – Cybersecurity requirements for software that searches for, removes, or quarantines malicious software
  • EN 304 620 – Cybersecurity requirements for virtual private networks (VPNs)
  • EN 304 621 – Cybersecurity requirements for network management systems (NMSs)
  • EN 304 622 – Cybersecurity requirements for security information and event management (SIEM)
  • EN 304 623 – Cybersecurity requirements for boot managers
  • EN 304 624 – Essential cybersecurity requirements for public key infrastructure and digital certificate issuance software
  • EN 304 625 – Cybersecurity requirements for physical and virtual network interfaces
  • EN 304 626 – Cybersecurity requirements for operating systems (OS)
  • EN 304 627 – Essential cybersecurity requirements for routers, modems intended for internet connection, and switches
  • EN 304 635 – Cybersecurity requirements for virtualization execution stack (VES) and container execution stack (CES), including hypervisors and container runtime systems
  • EN 304 636 – Cybersecurity requirements for firewalls and intrusion detection and/or prevention systems

These draft standards are open for comments and can be accessed online.