Sytance
Product & solutions
English
English简体中文Deutsch日本語ItalianoFrançaisEspañolPortuguês (Portugal)한국어PolskiNederlands繁體中文（香港）

CRA Product Standards by Category

Sytance · Updated

This reference lists all Annex III and Annex IV product categories alongside the public ETSI CYBER EUSR drafts found in the Open folder on 23 June 2026. A category without a link had no matching public draft in that snapshot.

Public source

The page uses Annex III and Annex IV as the category list, Regulation 2025/2392 for the technical meaning of the category names, M/606 for the requested product-specific standards, and the ETSI CYBER EUSR Open folder for public draft files.

The category lists below retain the 23 June 2026 snapshot. A check on 6 October 2026 found that its browser and router draft addresses redirect to an ETSI login page. Accessible replacement files are linked separately with their versions; they are not the historical files. The current directory also lists EN 304 622 V1.0.0 for SIEM and EN 304 624 V1.0.0 for PKI. Their absence below describes the June snapshot, not their current availability. Current ETSI public directory.

All product categories

Annex III and Annex IV define the categories, including those without a draft link.

Public drafts

Historical locators retain the filenames found in the ETSI Open folder; access may now require login. Later public files are labelled separately.

Legal effect

Presumption of conformity still needs an Official Journal reference.

Annex III Class I

Class I contains the longer Annex III list. Public draft links are included only where the Open folder lists a matching file.

  1. Identity management systems and privileged access management software and hardware, including authentication and access control readers, including biometric readersNo public draft listed.
  2. Standalone and embedded browsers
    EN 304 617 historical draft locator EN_304-617_V0.1.1_2026-04-04_Browsers_Mature-draft.pdfPublic file checked on 6 October 2026: EN 304 617 V1.0.0 (2026-08-12)
  3. Password managers
    EN 304 618 historical draft locator EN_304-618_V0.2.2_2026-06-22_Password-managers_Enquiry-draft.pdf
  4. Software that searches for, removes, or quarantines malicious software
    EN 304 619 historical draft locator EN_304-619_V0.0.26_2026-04_Antivirus-Antimalware_Mature-draft.pdf
  5. Products with digital elements with the function of virtual private network (VPN)
    EN 304 620 historical draft locator EN_304-620_V0.1.9_2026-04-27_Virtual-Private-Networks_Mature-draft.pdf
  6. Network management systems
    EN 304 621 historical draft locator EN_304-621_V0.1.3_2026-04-20_Network-Management-Systems_Mature-draft.pdf
  7. Security information and event management (SIEM) systemsNo public draft listed.
  8. Boot managers
    EN 304 623 historical draft locator EN_304-623_V0.1.3_2026-06-17_Boot_Managers_Enquiry-draft.pdf
  9. Public key infrastructure and digital certificate issuance softwareNo public draft listed.
  10. Physical and virtual network interfaces
    EN 304 625 historical draft locator EN_304-625_V0.0.14_2026-04-17_Network-Interfaces_Mature-draft.pdf
  11. Operating systems
    EN 304 626 historical draft locator EN_304-626_V0.2.0_2026-04-23_Operating-Systems_Mature-draft.pdf
  12. Routers, modems intended for the connection to the internet, and switches
    EN 304 627 historical draft locator EN_304-627_V1.0.0_2026-06-01_Routers-Modems-Switches_Final-draft.pdfPublic file checked on 6 October 2026: EN 304 627 V1.0.1 (2026-07-06)
  13. Microprocessors with security-related functionalitiesNo public draft listed.
  14. Microcontrollers with security-related functionalitiesNo public draft listed.
  15. Application specific integrated circuits (ASIC) and field-programmable gate arrays (FPGA) with security-related functionalitiesNo public draft listed.
  16. Smart home general purpose virtual assistants
    EN 304 631 historical draft locator EN_304-631_V0.2.1.4_2026-04-17_Smart-home-virtual-assistants_Mature-draft.pdf
  17. Smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems
    EN 304 632 historical draft locator EN_304-632_V0.2.1.4_2026-04-17_Smart-home-security-products_Mature-draft.pdf
  18. Internet connected toys covered by Directive 2009/48/EC of the European Parliament and of the Council that have social interactive features (e.g. speaking or filming) or that have location tracking features
    EN 304 633 historical draft locator EN_304-633_V0.2.3.3_2026-04-17_Internet-connected-toys_Mature-Draft.pdf
  19. Personal wearable products to be worn or placed on a human body that have a health monitoring (such as tracking) purpose and to which Regulation (EU) 2017/745 or (EU) 2017/746 of the European Parliament and of the Council do not apply, or personal wearable products that are intended for the use by and for children
    EN 304 634 historical draft locator EN_304-634_V0.2.6_2026-04-17_Personal-wearables_Mature-draft.pdf

Annex III Class II

Class II contains four Annex III categories. Two had public ETSI Open draft links in the June snapshot retained here.

  1. Hypervisors and container runtime systems that support virtualised execution of operating systems and similar environments
    EN 304 635 historical draft locator EN_304-635_V0.0.15_2026-04-20_Virtualization-Container_Mature-draft.pdf
  2. Firewalls, intrusion detection and prevention systems
    EN 304 636 historical draft locator EN_304-636_V0.1.0_2026-04-22_Firewalls_Mature-draft.pdf
  3. Tamper-resistant microprocessorsNo public draft listed.
  4. Tamper-resistant microcontrollersNo public draft listed.

Annex IV critical products

Annex IV critical products are also part of M/606's product-specific standardisation request. No ETSI Open draft link is listed here for these categories.

  1. Hardware Devices with Security BoxesNo public draft listed.
  2. Smart meter gateways within smart metering systems as defined in Article 2(23) of Directive (EU) 2019/944 of the European Parliament and of the Council and other devices for advanced security purposes, including for secure cryptoprocessingNo public draft listed.
  3. Smartcards or similar devices, including secure elementsNo public draft listed.

Using public drafts

Public drafts can help early gap analysis, design discussion, and product planning. They should not be described as cited harmonised standards unless their references are published in the Official Journal.

For the legal effect of harmonised standards, use Harmonised Standards and Presumption of Conformity. For the technical meaning of product categories, use Regulation 2025/2392 Technical Descriptions.

Sources

Previous

Harmonised Standards and Presumption of Conformity

Next

prEN 40000-1-2 Principles for Cyber Resilience