Support period

Short definition

Under the Cyber Resilience Act, the period during which a manufacturer must ensure effective handling of vulnerabilities in the covered product. Its duration reflects expected use and the regulation’s criteria, with a minimum of five years unless expected use is shorter. Each security update released during support must remain available for ten years after release or the remainder of support, whichever is longer. These general requirements apply from 11 December 2027.