EU Cyber Resilience Act Annex VIII Part IV 4: Module H: surveillance access for the notified body

The manufacturer must give the notified body access to design, development, production, inspection, testing and storage sites and all necessary information, including quality system documentation and design and manufacturing quality records, and receives periodic audit reports.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Annex VIII conformity assessment modules – EU Cyber Resilience Act

Annex VIII Part I Module A: internal control
Annex VIII Part II Module B: EU-type examination application and manufacturer duties
Annex VIII Part III Module C: conformity to type based on internal production control
Annex VIII Part IV 3 Module H: approved quality system
Annex VIII Part IV 5-6 Module H: marking, declaration and record retention

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All EU Cyber Resilience Act controls