As of: 13 Jul 2026
Summary
An ENISA maturity model helps smaller manufacturers of digital products identify gaps.
What happened?
ENISA has published a maturity model for smaller businesses that manufacture or place products with digital elements on the market. It helps identify gaps in governance, risk management, updates and product support. A high score does not establish legal compliance.
Why does it matter?
Small manufacturers of digital products must prepare for the Cyber Resilience Act. A self-check reveals gaps early.
Who is most affected?
Small and medium-sized manufacturers and distributors of products with digital elements.
What does it mean for businesses?
Document responsibilities and update processes, then use the assessment to plan improvements. Ordinary users of IT products do not automatically become manufacturers.
What can you do now?
- 1Run the self-check and document the results
- 2Review processes for updates and product support
Editorial assessment
Our conclusion
For small manufacturers the main takeaway is that weaknesses in updates and product support can be made visible with simple means. A good self-check result is not proof of legal compliance.
Source
ENISA · Source date
Status / reviewed on: