The Cyber Resilience Act (CRA) is approaching, and December 2027 is closer than it may appear. The CRA will significantly impact how GEA develops, markets, services, and procures products that contain digital elements. For Procurement, the attached document outlines the CRA-related requirements that must be communicated to and fulfilled by GEA suppliers. This document will be incorporated by reference into the Terms and Conditions of Purchase and Procurement. Compliance with these CRA requirements is mandatory when establishing new agreements or renewing existing agreements with suppliers that provide products or components containing digital elements.
