CLAIM-2026-08-10-09

Cyber Resilience Act Article 24 obliges open-source software stewards to put in place and document in a verifiable manner a cybersecurity policy, and to cooperate with market surveillance authorities at their request. Article 14(1) applies where the steward is directly involved in the development of the product, and Article 14(3) and (8) where a severe incident affects infrastructure used for that development.

Sources

• europeancyb2024cybere