CRA COMPLIANCE · EN

CRA standards — process stage is not OJEU citation

Track standards against the relevant product category, but distinguish draft, public enquiry, comment assessment, approved EN and Official Journal citation.

A product-category evidence map

Connect the provisional category to relevant horizontal and vertical work items. Record number, source, stage, version, observation date and next planned milestone. A planned date is not completed approval.

Presumption of conformity

Do not treat a draft or approved EN as a cited harmonised standard. Verify OJEU publication, scope, restrictions and covered requirements. Presumption is limited to the requirements and scope actually covered; it does not erase other product risks.

Use drafts responsibly

Draft process documents can help organise risk, verification, release and vulnerability-handling evidence. Label this mapping as preparatory, not compliant with a harmonised standard. Semiconductor or other early-stage work items can remain watch-only.

ETSI CRA Standards Tracker

EN 304 617 · Web browsers

COMMISSION ASSESSMENT · EC assessment before EV received (2026-09-28) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 618 · Password managers

COMMENTS · Comments categorisation assessed (2026-09-22) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 619 · Antivirus software

COMMENTS · Comments categorisation assessed (2026-10-14) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-15

ETSI Work Programme →

EN 304 620 · VPN

COMMISSION ASSESSMENT · EC assessment before EV received (2026-09-28) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 621 · Network management systems

PUBLIC ENQUIRY · Public Enquiry — historical snapshot; verify the current stage · NO VERIFIED OJEU CITATION

Source checked: 2026-08-28

ETSI Work Programme →

EN 304 622 · SIEM systems

PUBLIC ENQUIRY · Public Enquiry — historical snapshot; verify the current stage · NO VERIFIED OJEU CITATION

Source checked: 2026-08-28

ETSI Work Programme →

EN 304 623 · Boot managers

COMMENTS · Comments categorisation assessed (2026-09-16) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 624 · PKI and certificate issuance software

PUBLIC ENQUIRY · Public Enquiry — historical snapshot; verify the current stage · NO VERIFIED OJEU CITATION

Source checked: 2026-08-28

ETSI Work Programme →

EN 304 625 · Network interfaces

PUBLIC ENQUIRY · Public Enquiry — historical snapshot; verify the current stage · NO VERIFIED OJEU CITATION

Source checked: 2026-08-28

ETSI Work Programme →

EN 304 626 · Operating systems

COMMISSION ASSESSMENT · EC assessment before EV received (2026-09-28) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 627 · Routers, modems and switches

COMMENTS · Comments categorisation assessed (2026-10-01) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 631 · Smart-home virtual assistants

COMMENTS · Comments categorisation assessed (2026-10-14) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-15

ETSI Work Programme →

EN 304 632 · Smart-home security cameras, locks, alarms and baby monitors

COMMENTS · Comments categorisation assessed (2026-10-14) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-15

ETSI Work Programme →

EN 304 633 · Internet-connected toys

COMMENTS · Comments categorisation assessed (2026-10-14) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-15

ETSI Work Programme →

EN 304 634 · Health-monitoring wearables outside MDR/IVDR, or for children

DRAFT · Stable draft (2026-10-12) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-14

ETSI Work Programme →

EN 304 635 · Virtualisation and container systems

COMMENTS · Comments categorisation assessed (2026-09-17) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

EN 304 636 · Firewalls and IDS/IPS systems

COMMENTS · Comments categorisation assessed (2026-10-06) · NO VERIFIED OJEU CITATION

Source checked: 2026-10-11

ETSI Work Programme →

Next steps

Official sources and review context

Regulation (EU) 2024/2847 · European Commission · ENISA SRP

CRA-I18N-2026-10-14-DRAFT-4

Operational tools and retained records. No legal opinion, conformity assessment, certification or confirmation of CRA compliance is generated.