<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2024-11-20","gaps":[],"covered":["CRA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/cra/recitals/77","url":"https://www.headlesslaw.com/cra/recitals/77","title":"Recital 77","family":"l1_recital_view","work_id":"cra","view_of":"/cra/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Regulation (EU) 2024/2847, OJ L, 2024/2847, 20.11.2024","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847","valid_from":"2024-11-20","valid_until":null,"content_id":"f546fea38fd1a683","versions":["2024-11-20"],"version_url":"https://www.headlesslaw.com/cra/recitals/77/versions/2024-11-20","revision_url":"https://www.headlesslaw.com/cra/recitals/77/versions/2024-11-20/rev/f546fea38fd1a683","versions_url":"https://www.headlesslaw.com/cra/recitals/77/versions","relations_url":"https://www.headlesslaw.com/cra/recitals/77/relations","act_url":"https://www.headlesslaw.com/cra/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"cra","path":"/cra/recitals","name":"CRA","number":"Regulation (EU) 2024/2847","celex":"32024R2847","title_official":null,"document_date":null},"position":{"kind":"recital","key":"77","index":77,"articles":130,"annexes":0},"prev":{"path":"/cra/recitals/76","key":"76","title":"Recital 76"},"next":{"path":"/cra/recitals/78","key":"78","title":"Recital 78"},"act_anchor":""}}} -->
# Recital 77

*In force · Regulation (EU) 2024/2847, OJ L, 2024/2847, 20.11.2024 · Checked against EUR-Lex on 1 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847)*

In order to facilitate vulnerability analysis, manufacturers should identify and document components contained in the products with digital elements, including by drawing up an SBOM. An SBOM can provide those who manufacture, purchase, and operate software with information that enhances their understanding of the supply chain, which has multiple benefits, in particular it helps manufacturers and users to track known newly emerged vulnerabilities and cybersecurity risks. It is of particular importance that manufacturers ensure that their products with digital elements do not contain vulnerable components developed by third parties. Manufacturers should not be obliged to make the SBOM public.