EU Cyber Resilience Act

Placing on the market, classification and conformity routes – EU Cyber Resilience Act

EU Cyber Resilience Act Art. 32(3): Conformity assessment for important class II products

For an Annex III class II product, conformity must be shown by module B plus C, module H, or, where available, a European cybersecurity certification scheme at assurance level at least substantial. Internal control is not available.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Placing on the market, classification and conformity routes – EU Cyber Resilience Act

Art. 32(1) Choosing a conformity assessment procedure (default products)
Art. 32(2) Conformity assessment for important class I products
Art. 32(4) Conformity assessment for critical products
Art. 32(5) Open-source products in Annex III using any procedure
Art. 6 Condition for making a product available on the market
Art. 7(1) Classifying a product as important (Annex III, class I or II)
Art. 8(1) Critical products and European cybersecurity certification

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All EU Cyber Resilience Act controls