The nationale accreditatie-instantie has accredited the first five certification bodies for the Cyber Resilience Act (EU) 2024/2847. BSI, UL International, DEKRA, Brightsight and TrustCB can therefore assess whether products with digital elements comply with the cybersecurity requirements of the European regulation.
De nationale accreditatie-instantie began the development process for this new accreditation activity at the start of 2026. According to the accreditation body, this was an extensive process to which clients and assessment teams made intensive contributions. The first accreditation statements were presented in the week preceding 3 November.
At the presentation, the organisations involved discussed, among other things, standards development, market trends, the shortage of technical staff and the way in which manufacturers and product developers deal with the Cyber Resilience Act. de nationale accreditatie-instantie calls the accreditations a first step and says it is the first accreditation body in Europe to have granted accreditations for this regulation.
New applications for CRA accreditation can now be submitted via the Prisma Aanvraagtool. Organisations that submit an accreditation application in 2026 or 2027 for a recently completed development process will contribute to the development costs incurred. For the CRA, this contribution is €1,500 per organisation.
