12 Feb 2026

Fact Sheet on Important and critical products defined by the Cyber Resilience Act

This fact sheet provides guidance on how electronic fire safety and security products are classified under the EU Cyber Resilience Act (CRA) and its categories of Important and Critical products.

The fact sheet explains which products fall into the “default,” Important Class I, Important Class II, or Critical categories and clarifies the resulting conformity assessment procedures manufacturers must follow before placing products on the EU market. With practical examples for smart home security, identity and access management systems, and hardware devices with security boxes, the document helps manufacturers understand their obligations and determine the appropriate compliance pathway.