Skip to the text
Text as of 10 Dec 2024 · Consolidated version of 20 November 2024 · Same wording as today’s text.Today’s text

Annex III

Digital & dataLevel 1RegulationCRAIn forceOfficial source

IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS

Class I

(1)
1.Identity management systems and privileged access management software and hardware, including authentication and access control readers, including biometric readers
Copy link
(2)
2.Standalone and embedded browsers
Copy link
(3)
3.Password managers
Copy link
(4)
4.Software that searches for, removes, or quarantines malicious software
Copy link
(5)
5.Products with digital elements with the function of virtual private network (VPN)
Copy link
(6)
6.Network management systems
Copy link
(7)
7.Security information and event management (SIEM) systems
Copy link
(8)
8.Boot managers
Copy link
(9)
9.Public key infrastructure and digital certificate issuance software
Copy link
(10)
10.Physical and virtual network interfaces
Copy link
(11)
11.Operating systems
Copy link
(12)
12.Routers, modems intended for the connection to the internet, and switches
Copy link
(13)
13.Microprocessors with security-related functionalities
Copy link
(14)
14.Microcontrollers with security-related functionalities
Copy link
(15)
15.Application specific integrated circuits (ASIC) and field-programmable gate arrays (FPGA) with security-related functionalities
Copy link
(16)
16.Smart home general purpose virtual assistants
Copy link
(17)
17.Smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems
Copy link
(18)
18.Internet connected toys covered by Directive 2009/48/EC of the European Parliament and of the Council that have social interactive features (e.g. speaking or filming) or that have location tracking features
Copy link
(19)
19.Personal wearable products to be worn or placed on a human body that have a health monitoring (such as tracking) purpose and to which Regulation (EU) 2017/745 or (EU) No 2017/746 do not apply, or personal wearable products that are intended for the use by and for children
Copy link

Class II

(1)
1.Hypervisors and container runtime systems that support virtualised execution of operating systems and similar environments
Copy link
(2)
2.Firewalls, intrusion detection and prevention systems
Copy link
(3)
3.Tamper-resistant microprocessors
Copy link
(4)
4.Tamper-resistant microcontrollers
Copy link