欧盟网络安全局（ENISA）：2026年中小企业网络安全韧性成熟度评估模型报告（英文版）

The Cyber Resilience Act (CRA) (1 ) introduces new cybersecurity requirements for products with digital elements placed on the EU market. With the regulation entering into application in December 2027, manufacturers, distributors and importers, including micro, small and medium-sized enterprises (SMEs), will need to ensure that their products meet cybersecurity requirements throughout the product life cycle. Since SMEs make up a large part of the EU´s digital ecosystem, their ability to under