Euralarm fact sheet on CRA categories
A new fact sheet sets out how electronic fire safety and security products are classified under the EU Cyber Resilience Act (CRA), published in November 2024.
Euralarm said the document is intended to help manufacturers understand categorisation and conformity assessment obligations before products can be placed on the EU market.
The fact sheet describes the CRA product categories as “default,” Important Class I, Important Class II, and Critical.
It explains that the essential cybersecurity requirements apply equally to all in-scope products with digital elements.
It also explains that Important and Critical products are subject to stricter conformity assessment procedures.
The document sets out why correct categorisation matters for deciding whether self-assessment is permitted or whether a notified body is required.
Examples used to classify fire safety and security products
In the fact sheet, Euralarm provides structured examples focused on electronic fire safety and security products where interpretation can raise practical questions.
The examples include smart home products with security functionalities, identity management systems and privileged access management products, and hardware devices with security boxes.
The document also uses examples including intrusion detection systems, fire detection control panels, access control systems, biometric readers, and cloud-based alarm management software.
It explains when a product’s core functionality determines its categorisation.
It states that most electronic fire safety and physical security products are expected to fall within the “default” category and may rely on self-assessment where compliance with the CRA essential requirements can be demonstrated.
It also states that embedding security-related components such as microcontrollers with security functions or cryptographic capabilities does not automatically make a product “Important” or “Critical” where its core functionality does not meet the criteria defined in the Implementing Regulation.
Standards and conformity assessment routes
Euralarm noted that future harmonised standards under development may support manufacturers in demonstrating conformity under the CRA.
The fact sheet references EN 62443-4-x and other horizontal standards as examples that may support presumption of conformity where applicable.
The publication is presented as part of Euralarm’s ongoing work to support the fire safety and security industry in adapting to European regulatory requirements.