{"id":5977,"date":"2026-08-25T08:14:21","date_gmt":"2026-08-25T05:14:21","guid":{"rendered":"https:\/\/aesinn.com\/ab-siber-dayaniklilik-yasasi-cra-dijital-urunlerde-yeni-siber-guvenlik-donemi\/"},"modified":"2026-08-25T08:18:15","modified_gmt":"2026-08-25T05:18:15","slug":"ab-siber-dayaniklilik-yasasi-cra-dijital-urunlerde-yeni-siber-guvenlik-donemi","status":"publish","type":"post","link":"https:\/\/aesinn.com\/en\/ab-siber-dayaniklilik-yasasi-cra-dijital-urunlerde-yeni-siber-guvenlik-donemi\/","title":{"rendered":"EU Cyber Resilience Act (CRA): A New Era of Cybersecurity in Digital Products"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Giri\u015f: CRA neden \u00f6nemli?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Avrupa Birli\u011fi, dijital d\u00fcnyan\u0131n g\u00fcvenli\u011fini \u00fcr\u00fcn seviyesine indiren kapsaml\u0131 bir d\u00fczenlemeyi y\u00fcr\u00fcrl\u00fc\u011fe koydu: Siber Dayan\u0131kl\u0131l\u0131k Yasas\u0131 (Cyber Resilience Act, CRA). Resm\u00ee ad\u0131yla (AB) 2024\/2847 say\u0131l\u0131 T\u00fcz\u00fck, 10 Aral\u0131k 2024&#8217;te y\u00fcr\u00fcrl\u00fc\u011fe girdi ve &#8220;dijital elemanlar i\u00e7eren \u00fcr\u00fcnler&#8221; i\u00e7in AB genelinde ilk yatay (sekt\u00f6rden ba\u011f\u0131ms\u0131z) siber g\u00fcvenlik \u00e7er\u00e7evesini kuruyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CRA, bir y\u00f6nerge (directive) de\u011fil, do\u011frudan uygulanabilir bir t\u00fcz\u00fck (regulation) oldu\u011fu i\u00e7in AB \u00fcye devletlerinde ulusal aktar\u0131ma gerek kalmadan ayn\u0131 bi\u00e7imde uygulan\u0131r. Bu, kurallara tabi her \u00fcretici i\u00e7in tek ve \u00f6ng\u00f6r\u00fclebilir bir zemin anlam\u0131na gelir. T\u00fcrkiye gibi AB&#8217;ye ihracat yapan \u00fc\u00e7\u00fcnc\u00fc \u00fclkelerin \u00fcreticileri de, \u00fcr\u00fcnleri AB pazar\u0131na sunuldu\u011fu \u00f6l\u00e7\u00fcde bu kurallara uymak zorundad\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu yaz\u0131da CRA&#8217;n\u0131n kapsam\u0131n\u0131, \u00fcreticilere getirdi\u011fi temel y\u00fck\u00fcml\u00fcl\u00fckleri, kademeli uygulama takvimini ve \u00f6zellikle T\u00fcrk elektronik, IoT, beyaz e\u015fya ve ba\u011flant\u0131l\u0131 cihaz \u00fcreticileri a\u00e7\u0131s\u0131ndan ne anlama geldi\u011fini nesnel bi\u00e7imde ele al\u0131yoruz.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Kanonik kimlik: Regulation (EU) 2024\/2847 (CELEX 32024R2847).<\/li>\n\n\n<li>Y\u00fcr\u00fcrl\u00fc\u011fe giri\u015f: 10 Aral\u0131k 2024.<\/li>\n\n\n<li>Ana y\u00fck\u00fcml\u00fcl\u00fcklerin tam uygulamas\u0131: 11 Aral\u0131k 2027.<\/li>\n\n\n<li>Yatay \u00e7er\u00e7eve: belirli bir sekt\u00f6re de\u011fil, dijital elemanl\u0131 t\u00fcm \u00fcr\u00fcnlere uygulan\u0131r.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Which products are included?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CRA&#8217;n\u0131n kapsam\u0131 &#8220;dijital elemanlar i\u00e7eren \u00fcr\u00fcnler&#8221; (products with digital elements) kavram\u0131 etraf\u0131nda kurgulanm\u0131\u015ft\u0131r. Bu tan\u0131m, bir a\u011fa veya ba\u015fka bir cihaza do\u011frudan ya da dolayl\u0131 olarak (mant\u0131ksal veya fiziksel) veri ba\u011flant\u0131s\u0131 kurabilen t\u00fcm donan\u0131m ve yaz\u0131l\u0131m \u00fcr\u00fcnlerini, ayr\u0131ca ayr\u0131 olarak piyasaya s\u00fcr\u00fclen uzaktan veri i\u015fleme \u00e7\u00f6z\u00fcmlerini kapsar. K\u0131sacas\u0131 internete veya ba\u015fka bir cihaza ba\u011flanabilen hemen her ak\u0131ll\u0131 \u00fcr\u00fcn potansiyel olarak kapsamdad\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00fcz\u00fck, \u00fcr\u00fcnleri risk d\u00fczeyine g\u00f6re kademelendirir. Standart \u00fcr\u00fcnlerin b\u00fcy\u00fck \u00e7o\u011funlu\u011fu \u00fcreticinin \u00f6z-de\u011ferlendirmesiyle (\u00f6z-beyan) uygunluk g\u00f6sterebilir. Buna kar\u015f\u0131l\u0131k, siber g\u00fcvenlik a\u00e7\u0131s\u0131ndan daha hassas kabul edilen &#8220;\u00f6nemli&#8221; (important) \u00fcr\u00fcnler Ek III&#8217;te s\u0131n\u0131fland\u0131r\u0131l\u0131r ve s\u0131n\u0131flar\u0131na g\u00f6re (S\u0131n\u0131f I veya S\u0131n\u0131f II) daha s\u0131k\u0131 prosed\u00fcrlere tabi olabilir. En y\u00fcksek riskli &#8220;kritik&#8221; (critical) \u00fcr\u00fcnler ise Ek IV&#8217;te listelenir ve en kat\u0131 \u00fc\u00e7\u00fcnc\u00fc taraf de\u011ferlendirme beklentileriyle kar\u015f\u0131la\u015fabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Baz\u0131 \u00fcr\u00fcn kategorileri, kendi sekt\u00f6rel mevzuatlar\u0131na tabi olduklar\u0131 i\u00e7in CRA kapsam\u0131 d\u0131\u015f\u0131nda b\u0131rak\u0131lm\u0131\u015ft\u0131r (\u00f6rne\u011fin belirli t\u0131bbi cihazlar, motorlu ta\u015f\u0131tlar, havac\u0131l\u0131k ve baz\u0131 denizcilik ekipmanlar\u0131 gibi kendi siber g\u00fcvenlik rejimleri olan alanlar). \u00dcr\u00fcn\u00fcn\u00fcz\u00fcn tam olarak hangi kategoriye girdi\u011fini, ilgili eklerin ve Komisyon&#8217;un \u00e7\u0131kard\u0131\u011f\u0131 uygulama d\u00fczenlemelerinin \u0131\u015f\u0131\u011f\u0131nda de\u011ferlendirmek gerekir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Ba\u011flant\u0131l\u0131\/ak\u0131ll\u0131 donan\u0131m: y\u00f6nlendiriciler, kameralar, ak\u0131ll\u0131 ev cihazlar\u0131, IoT sens\u00f6rleri.<\/li>\n\n\n<li>Beyaz e\u015fya ve elektronik: ba\u011flant\u0131 \u00f6zelli\u011fi olan buzdolab\u0131, \u00e7ama\u015f\u0131r makinesi, TV vb.<\/li>\n\n\n<li>Yaz\u0131l\u0131m \u00fcr\u00fcnleri: i\u015fletim sistemleri, uygulamalar, g\u00f6m\u00fcl\u00fc yaz\u0131l\u0131mlar (firmware).<\/li>\n\n\n<li>&#8220;\u00d6nemli&#8221; \u00fcr\u00fcnler (Ek III, S\u0131n\u0131f I\/II) ve &#8220;kritik&#8221; \u00fcr\u00fcnler (Ek IV) daha s\u0131k\u0131 de\u011ferlendirmeye tabidir.<\/li>\n\n\n<li>Kendi sekt\u00f6rel rejimi olan baz\u0131 \u00fcr\u00fcnler (belirli t\u0131bbi cihaz, ta\u015f\u0131t, havac\u0131l\u0131k) kapsam d\u0131\u015f\u0131d\u0131r.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u00dcretici y\u00fck\u00fcml\u00fcl\u00fckleri<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CRA, siber g\u00fcvenli\u011fi \u00fcr\u00fcn\u00fcn t\u00fcm ya\u015fam d\u00f6ng\u00fcs\u00fcne yayan bir yakla\u015f\u0131m benimser. \u00dcretici, g\u00fcvenli\u011fi tasar\u0131m a\u015famas\u0131ndan itibaren dikkate almak (security by design ve security by default), \u00fcr\u00fcn\u00fc piyasaya s\u00fcrerken bilinen istismar edilebilir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 olmadan sunmak ve \u00fcr\u00fcn\u00fcn destek s\u00fcresi boyunca g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 y\u00f6netmekle y\u00fck\u00fcml\u00fcd\u00fcr.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">G\u00fcvenlik a\u00e7\u0131\u011f\u0131 y\u00f6netimi (vulnerability handling) t\u00fcz\u00fc\u011f\u00fcn kalbindedir: \u00fcreticiler a\u00e7\u0131klar\u0131 tespit etmek, gidermek ve kullan\u0131c\u0131lara \u00fccretsiz g\u00fcvenlik g\u00fcncellemeleri sa\u011flamak i\u00e7in s\u00fcre\u00e7ler kurmal\u0131d\u0131r. Ayr\u0131ca \u00fcr\u00fcn\u00fcn i\u00e7erdi\u011fi bile\u015fenleri belgeleyen bir yaz\u0131l\u0131m malzeme listesi (SBOM) tutmak ve destek d\u00f6nemini (support period) a\u00e7\u0131k\u00e7a belirlemek gibi beklentiler \u00f6ne \u00e7\u0131kar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uygunluk kan\u0131t\u0131 taraf\u0131nda ise klasik AB &#8220;yeni yakla\u015f\u0131m&#8221; mant\u0131\u011f\u0131 ge\u00e7erlidir: \u00fcretici bir uygunluk de\u011ferlendirmesi y\u00fcr\u00fct\u00fcr, teknik dosya ve AB uygunluk beyan\u0131 haz\u0131rlar ve gereklilikleri kar\u015f\u0131layan \u00fcr\u00fcne CE i\u015faretini ili\u015ftirir. CE i\u015fareti burada, \u00fcr\u00fcn\u00fcn CRA&#8217;n\u0131n temel siber g\u00fcvenlik gerekliliklerini kar\u015f\u0131lad\u0131\u011f\u0131n\u0131n beyan\u0131d\u0131r. Hangi de\u011ferlendirme yolunun izlenece\u011fi, \u00fcr\u00fcn\u00fcn standart, &#8220;\u00f6nemli&#8221; veya &#8220;kritik&#8221; s\u0131n\u0131f\u0131na g\u00f6re de\u011fi\u015fir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Tasar\u0131mda g\u00fcvenlik ve varsay\u0131lan g\u00fcvenli yap\u0131land\u0131rma (security by design\/default).<\/li>\n\n\n<li>Piyasaya sunumda bilinen istismar edilebilir a\u00e7\u0131k bulundurmama.<\/li>\n\n\n<li>Destek s\u00fcresi boyunca g\u00fcvenlik a\u00e7\u0131\u011f\u0131 y\u00f6netimi ve \u00fccretsiz g\u00fcncelleme.<\/li>\n\n\n<li>Yaz\u0131l\u0131m malzeme listesi (SBOM) ve teknik dok\u00fcmantasyon tutma.<\/li>\n\n\n<li>Uygunluk de\u011ferlendirmesi, AB uygunluk beyan\u0131 ve CE i\u015fareti.<\/li>\n\n\n<li>A\u00e7\u0131k\u00e7a tan\u0131mlanm\u0131\u015f ve kullan\u0131c\u0131ya bildirilen destek d\u00f6nemi.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u00d6nemli tarihler: bildirim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc m\u00fc, tam uygulama m\u0131?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CRA tek bir tarihte de\u011fil, kademeli olarak y\u00fcr\u00fcrl\u00fc\u011fe girer. Bu y\u00fczden &#8220;CRA 2027&#8217;de ba\u015fl\u0131yor&#8221; demek yan\u0131lt\u0131c\u0131 olabilir; baz\u0131 y\u00fck\u00fcml\u00fcl\u00fckler \u00e7ok daha erken devreye girer. T\u00fcz\u00fck 10 Aral\u0131k 2024&#8217;te y\u00fcr\u00fcrl\u00fc\u011fe girmi\u015f olsa da, \u00fcreticilerin uymas\u0131 gereken esas gerekliliklerin \u00e7o\u011fu i\u00e7in tam uygulama tarihi 11 Aral\u0131k 2027&#8217;dir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ancak iki ara kilometre ta\u015f\u0131 kritik \u00f6nemdedir. Birincisi, uygunluk de\u011ferlendirme kurulu\u015flar\u0131n\u0131n bildirimine (onaylanm\u0131\u015f kurulu\u015f \/ notified body sistemine) ili\u015fkin B\u00f6l\u00fcm IV h\u00fck\u00fcmleri 11 Haziran 2026&#8217;dan itibaren uygulan\u0131r. \u0130kincisi ve \u00fcreticiler i\u00e7in en acili: aktif olarak istismar edilen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n ve ciddi olaylar\u0131n (severe incidents) bildirimine dair Madde 14 y\u00fck\u00fcml\u00fcl\u00fckleri 11 Eyl\u00fcl 2026&#8217;dan itibaren ge\u00e7erli olacakt\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Madde 14 bildirim rejimi, kademeli s\u00fcreleriyle \u00f6zellikle dikkat gerektirir: \u00fcretici, fark\u0131na vard\u0131\u011f\u0131 andan itibaren 24 saat i\u00e7inde bir erken uyar\u0131, 72 saat i\u00e7inde ise ayr\u0131nt\u0131l\u0131 bir bildirim sunmak zorundad\u0131r. Bu erken tarih, bir\u00e7ok \u00fcreticinin tam CRA uyumunu tamamlamadan \u00f6nce bile haz\u0131r olmas\u0131 gereken bir kriz ileti\u015fimi ve olay m\u00fcdahalesi kapasitesi anlam\u0131na gelir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>10 Aral\u0131k 2024: T\u00fcz\u00fck y\u00fcr\u00fcrl\u00fc\u011fe girdi.<\/li>\n\n\n<li>11 Haziran 2026: Uygunluk de\u011ferlendirme kurulu\u015flar\u0131n\u0131n bildirimi (B\u00f6l\u00fcm IV) uygulanmaya ba\u015flar.<\/li>\n\n\n<li>11 Eyl\u00fcl 2026: Madde 14 kapsam\u0131nda istismar edilen a\u00e7\u0131k ve ciddi olay bildirimi y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc ba\u015flar (24 saat erken uyar\u0131 \/ 72 saat detayl\u0131 bildirim).<\/li>\n\n\n<li>11 Aral\u0131k 2027: Ana y\u00fck\u00fcml\u00fcl\u00fcklerin tam uygulamas\u0131.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What does this mean for Turkish manufacturers?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AB pazar\u0131na dijital elemanl\u0131 \u00fcr\u00fcn (ba\u011flant\u0131l\u0131 elektronik, IoT, ak\u0131ll\u0131 beyaz e\u015fya, yaz\u0131l\u0131m vb.) sunan T\u00fcrk \u00fcreticileri i\u00e7in CRA, co\u011frafi konumdan ba\u011f\u0131ms\u0131z olarak do\u011frudan ba\u011flay\u0131c\u0131d\u0131r. \u00dcr\u00fcn AB&#8217;de piyasaya s\u00fcr\u00fcld\u00fc\u011f\u00fc anda, \u00fcreticinin nerede kurulu oldu\u011fu de\u011fil, \u00fcr\u00fcn\u00fcn gereklilikleri kar\u015f\u0131lay\u0131p kar\u015f\u0131lamad\u0131\u011f\u0131 belirleyicidir. AB&#8217;de yerle\u015fik olmayan \u00fcreticilerin \u00fcr\u00fcnlerini piyasaya sunmas\u0131 genellikle AB i\u00e7inde bir sorumlu iktisadi akt\u00f6r\u00fcn (\u00f6rne\u011fin yetkili temsilci veya ithalat\u00e7\u0131) bulunmas\u0131n\u0131 gerektirir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pratikte bu, \u00fcr\u00fcn geli\u015ftirme ve sat\u0131\u015f sonras\u0131 s\u00fcre\u00e7lerin yeniden ele al\u0131nmas\u0131n\u0131 gerektirebilir: g\u00fcvenli yaz\u0131l\u0131m geli\u015ftirme ya\u015fam d\u00f6ng\u00fcs\u00fc, a\u00e7\u0131k bildirim (vulnerability disclosure) politikas\u0131, g\u00fcncelleme altyap\u0131s\u0131, SBOM \u00fcretimi ve destek d\u00f6nemi taahh\u00fcd\u00fc. 11 Eyl\u00fcl 2026&#8217;daki erken bildirim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, olay m\u00fcdahale ve raporlama mekanizmalar\u0131n\u0131n 2027&#8217;den \u00f6nce kurulmu\u015f olmas\u0131 \u00f6nem ta\u015f\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Erken haz\u0131rl\u0131k, hem uyum maliyetini zamana yaymak hem de 2027 sonras\u0131nda AB pazar\u0131na eri\u015fimin kesintiye u\u011framamas\u0131 a\u00e7\u0131s\u0131ndan avantaj sa\u011flar. \u0130lk ad\u0131m genellikle bir kapsam de\u011ferlendirmesidir: \u00fcr\u00fcn portf\u00f6y\u00fcn\u00fczdeki hangi kalemler &#8220;dijital elemanl\u0131 \u00fcr\u00fcn&#8221; tan\u0131m\u0131na girer, bunlardan hangileri &#8220;\u00f6nemli&#8221; veya &#8220;kritik&#8221; s\u0131n\u0131fa d\u00fc\u015febilir ve dolay\u0131s\u0131yla hangileri daha s\u0131k\u0131 uygunluk yollar\u0131na tabi olur?<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>AB&#8217;ye ihracat yapan T\u00fcrk \u00fcreticileri, \u00fcr\u00fcn AB pazar\u0131na girdi\u011fi \u00f6l\u00e7\u00fcde CRA&#8217;ya tabidir.<\/li>\n\n\n<li>AB d\u0131\u015f\u0131 \u00fcreticiler i\u00e7in genellikle AB i\u00e7inde sorumlu bir akt\u00f6r (yetkili temsilci\/ithalat\u00e7\u0131) gerekir.<\/li>\n\n\n<li>G\u00fcvenli geli\u015ftirme, a\u00e7\u0131k bildirim ve g\u00fcncelleme altyap\u0131s\u0131 kurulmas\u0131 gerekebilir.<\/li>\n\n\n<li>11 Eyl\u00fcl 2026 erken bildirim tarihi, olay m\u00fcdahale kapasitesinin erken haz\u0131r olmas\u0131n\u0131 gerektirir.<\/li>\n\n\n<li>\u0130lk pratik ad\u0131m: \u00fcr\u00fcn portf\u00f6y\u00fc i\u00e7in kapsam ve s\u0131n\u0131fland\u0131rma de\u011ferlendirmesi.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">CRA T\u00fcrkiye&#8217;de yerle\u015fik \u00fcreticileri neden ba\u011flar?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CRA, \u00fcr\u00fcn AB pazar\u0131na sunuldu\u011funda uygulan\u0131r; \u00fcreticinin AB d\u0131\u015f\u0131nda olmas\u0131 muafiyet sa\u011flamaz. \u00dcr\u00fcn\u00fcn\u00fcz AB&#8217;de piyasaya s\u00fcr\u00fcld\u00fc\u011f\u00fc \u00f6l\u00e7\u00fcde gerekliliklere uyman\u0131z gerekir. Ayr\u0131ca AB d\u0131\u015f\u0131 \u00fcreticilerin \u00fcr\u00fcnlerini piyasaya sunmas\u0131 genellikle AB i\u00e7inde sorumlu bir iktisadi akt\u00f6r\u00fcn (yetkili temsilci veya ithalat\u00e7\u0131) bulunmas\u0131n\u0131 gerektirir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Ana uygulama 2027 ise 2026&#8217;daki tarihler nedir?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CRA kademeli y\u00fcr\u00fcrl\u00fc\u011fe girer. Ana y\u00fck\u00fcml\u00fcl\u00fckler 11 Aral\u0131k 2027&#8217;de tam uygulan\u0131r. Ancak uygunluk de\u011ferlendirme kurulu\u015flar\u0131n\u0131n bildirimine dair B\u00f6l\u00fcm IV h\u00fck\u00fcmleri 11 Haziran 2026&#8217;da, aktif istismar edilen a\u00e7\u0131klar\u0131n ve ciddi olaylar\u0131n bildirimine dair Madde 14 y\u00fck\u00fcml\u00fcl\u00fckleri ise 11 Eyl\u00fcl 2026&#8217;da devreye girer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">&#8220;Dijital elemanlar i\u00e7eren \u00fcr\u00fcn&#8221; tam olarak neyi kapsar?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Bir a\u011fa veya ba\u015fka bir cihaza do\u011frudan ya da dolayl\u0131 olarak veri ba\u011flant\u0131s\u0131 kurabilen donan\u0131m ve yaz\u0131l\u0131m \u00fcr\u00fcnlerini, ayr\u0131ca ayr\u0131 sunulan uzaktan veri i\u015fleme \u00e7\u00f6z\u00fcmlerini kapsar. Ba\u011flant\u0131l\u0131 elektronik, IoT cihazlar\u0131, ak\u0131ll\u0131 beyaz e\u015fya, g\u00f6m\u00fcl\u00fc yaz\u0131l\u0131m ve ba\u011f\u0131ms\u0131z yaz\u0131l\u0131mlar tipik \u00f6rneklerdir. Kendi sekt\u00f6rel siber g\u00fcvenlik rejimi olan baz\u0131 \u00fcr\u00fcnler (belirli t\u0131bbi cihaz, ta\u015f\u0131t, havac\u0131l\u0131k) kapsam d\u0131\u015f\u0131d\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">&#8220;\u00d6nemli&#8221; ve &#8220;kritik&#8221; \u00fcr\u00fcnler ne demek?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CRA \u00fcr\u00fcnleri risk d\u00fczeyine g\u00f6re kademelendirir. Standart \u00fcr\u00fcnlerin \u00e7o\u011fu \u00fcreticinin \u00f6z-de\u011ferlendirmesiyle uygunluk g\u00f6sterebilir. &#8220;\u00d6nemli&#8221; \u00fcr\u00fcnler Ek III&#8217;te (S\u0131n\u0131f I\/II) listelenir ve daha s\u0131k\u0131 prosed\u00fcrlere tabi olabilir; en y\u00fcksek riskli &#8220;kritik&#8221; \u00fcr\u00fcnler Ek IV&#8217;te listelenir ve en kat\u0131 \u00fc\u00e7\u00fcnc\u00fc taraf de\u011ferlendirme beklentileriyle kar\u015f\u0131la\u015fabilir. Kesin s\u0131n\u0131fland\u0131rma, ilgili ekler ve Komisyon uygulama d\u00fczenlemeleri \u0131\u015f\u0131\u011f\u0131nda yap\u0131l\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">CRA kapsam\u0131nda CE i\u015fareti ne anlama gelir?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CRA, AB&#8217;nin &#8220;yeni yakla\u015f\u0131m&#8221; mant\u0131\u011f\u0131n\u0131 izler: \u00fcretici uygunluk de\u011ferlendirmesini y\u00fcr\u00fct\u00fcr, teknik dosya ve AB uygunluk beyan\u0131n\u0131 haz\u0131rlar ve gereklilikleri kar\u015f\u0131layan \u00fcr\u00fcne CE i\u015faretini ili\u015ftirir. Bu ba\u011flamda CE i\u015fareti, \u00fcr\u00fcn\u00fcn CRA&#8217;n\u0131n temel siber g\u00fcvenlik gerekliliklerini kar\u015f\u0131lad\u0131\u011f\u0131n\u0131n beyan\u0131d\u0131r; izlenecek de\u011ferlendirme yolu \u00fcr\u00fcn\u00fcn s\u0131n\u0131f\u0131na (standart\/\u00f6nemli\/kritik) g\u00f6re de\u011fi\u015fir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Bu i\u00e7erik yaln\u0131zca bilgilendirme ama\u00e7l\u0131d\u0131r ve hukuki g\u00f6r\u00fc\u015f ya da uygunluk de\u011ferlendirmesi niteli\u011fi ta\u015f\u0131maz. Kesin y\u00fck\u00fcml\u00fcl\u00fckler i\u00e7in g\u00fcncel resm\u00ee mevzuat metni (EUR-Lex) esas al\u0131nmal\u0131d\u0131r.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Connected devices, software, and embedded systems are now subject to cybersecurity requirements in the EU. We explain who the CRA covers, what obligations it imposes, and the critical deadlines for Turkish exporters.<\/p>","protected":false},"author":1,"featured_media":5986,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","slim_seo":{"title":"What is CRA (EU) 2024\/2847? A Guide for Turkish Manufacturers.","description":"The EU Cyber Resilience Act (CRA, (EU) 2024\/2847) introduces horizontal cybersecurity requirements for products with digital components. The scope includes manufacturer obligations and..."},"footnotes":""},"categories":[36,17,116],"tags":[],"class_list":["post-5977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ab-regulasyonlari-uyum","category-haberler","category-kuresel-uyum-ihracat"],"acf":[],"taxonomy_info":{"category":[{"value":36,"label":"AB Reg\u00fclasyonlar\u0131 ve Uyum"},{"value":17,"label":"Haberler"},{"value":116,"label":"K\u00fcresel Uyum &amp; \u0130hracat"}]},"featured_image_src_large":["https:\/\/aesinn.com\/wp-content\/uploads\/aes-cra-2026-1024x1024.png",1024,1024,true],"author_info":{"display_name":"Emre Metin","author_link":"https:\/\/aesinn.com\/en\/author\/yonetim\/"},"comment_info":"","category_info":[{"term_id":36,"name":"AB Reg\u00fclasyonlar\u0131 ve Uyum","slug":"ab-regulasyonlari-uyum","term_group":0,"term_taxonomy_id":36,"taxonomy":"category","description":"Avrupa Birli\u011fi \u00fcr\u00fcn ve tedarik zinciri reg\u00fclasyonlar\u0131 (DPP\/ESPR, PPWR, CSDDD, EUDR) ve uyum s\u00fcre\u00e7leri hakk\u0131nda bilgilendirici i\u00e7erikler.","parent":0,"count":25,"filter":"raw","cat_ID":36,"category_count":25,"category_description":"Avrupa Birli\u011fi \u00fcr\u00fcn ve tedarik zinciri reg\u00fclasyonlar\u0131 (DPP\/ESPR, PPWR, CSDDD, EUDR) ve uyum s\u00fcre\u00e7leri hakk\u0131nda bilgilendirici i\u00e7erikler.","cat_name":"AB Reg\u00fclasyonlar\u0131 ve Uyum","category_nicename":"ab-regulasyonlari-uyum","category_parent":0},{"term_id":17,"name":"Haberler","slug":"haberler","term_group":0,"term_taxonomy_id":17,"taxonomy":"category","description":"","parent":0,"count":50,"filter":"raw","cat_ID":17,"category_count":50,"category_description":"","cat_name":"Haberler","category_nicename":"haberler","category_parent":0},{"term_id":116,"name":"K\u00fcresel Uyum &amp; \u0130hracat","slug":"kuresel-uyum-ihracat","term_group":0,"term_taxonomy_id":116,"taxonomy":"category","description":"T\u00fcrk ihracat\u00e7\u0131lar\u0131 i\u00e7in k\u00fcresel \u00fcr\u00fcn uygunlu\u011fu ve reg\u00fclasyon rehberleri (AB, UK, ABD, K\u00f6rfez, EAEU\/\u00c7in).","parent":0,"count":22,"filter":"raw","cat_ID":116,"category_count":22,"category_description":"T\u00fcrk ihracat\u00e7\u0131lar\u0131 i\u00e7in k\u00fcresel \u00fcr\u00fcn uygunlu\u011fu ve reg\u00fclasyon rehberleri (AB, UK, ABD, K\u00f6rfez, EAEU\/\u00c7in).","cat_name":"K\u00fcresel Uyum &amp; \u0130hracat","category_nicename":"kuresel-uyum-ihracat","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/posts\/5977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/comments?post=5977"}],"version-history":[{"count":1,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/posts\/5977\/revisions"}],"predecessor-version":[{"id":5987,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/posts\/5977\/revisions\/5987"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/media\/5986"}],"wp:attachment":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/media?parent=5977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/categories?post=5977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/tags?post=5977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}