Publication date:June 24, 2026
ENISA is is working on practical guidance, tools and support activities tailored to the realities and needs of smaller organisations, to help small and medium-sized enterprises (SMEs) understand and implement the Cyber Resilience Act (CRA). This report presents the findings of the ENISA SME CRA Survey, conducted in February and March 2026. The survey aimed to better understand:
-
how familiar SMEs are with the CRA;
-
how well they understand the practical requirements of the regulation;
-
what they are currently doing in terms of cybersecurity;
-
what challenges they expect to face when working towards compliance.
