By Jacob Mammoliti, Solutions Architect, RapidFort
The EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations began on Sept. 11, with full enforcement commencing on Dec. 11, 2027. The CRA sets new requirements for teams working with containers and Kubernetes that impact how cloud native applications are built, distributed, and maintained throughout their lifecycle.
Cloud Native Environments and CRA Scope
Regardless of where a distributing organization is located, the CRA covers all container images, Kubernetes operators, and Helm charts with commercial support that are available to EU customers. The regulation specifies its scope as “products with digital elements” available in EU markets, and that also includes a lot of the cloud native stack.
CRA scope covers container images distributed publicly, commercial Kubernetes operators, open source with commercial backing, and Helm charts with commercial support. Open-source projects may also be impacted, including those with commercial backing or support contracts. In addition, the regulation…
This week, Anthropic announced an expansion of its Cyber Verification Program (CVP), breaking access into three use case–based tiers and The post Claude’s cyber…
He published a book on handling cyber extortion last month.
EL PASO, Texas (KTSM) -- The City of El Paso of El Paso’s Department of Community and Human Development (DCHD) will host its second Economic Resilience en la Frontera…
Discussion (0)
No comments yet. Start the conversation!