Scope, Definitions and General Provisions 適用範圍、定義與一般規定
Obligations of economic operators and provisions in relation to free and open-source software 經營者義務及自由與開源軟體相關規定
Conformity of the product with digital elements 具數位元素產品的符合性
Notification of conformity assessment bodies 符合性評鑑機構指定
Market surveillance and enforcement 市場監督與執法
Delegated powers and committee procedure 授權權限與委員會程序
Confidentiality and penalties 保密與處罰
Transitional and final provisions 過渡與最終規定
The annexes — where the real work lives 附件 — 實質工作所在
Annex I lists the essential cybersecurity requirements. Annex III and IV list the important and critical product categories. Most of the day-to-day compliance lives here, not in the articles. 附件一列出必要網路安全要求；附件三、四列出重要與關鍵產品類別。日常合規工作大多在附件裡，不在條文裡。
Part I: Product requirements. Part II: Vulnerability handling. Where "secure by design" actually gets defined.第一部分：產品要求；第二部分：弱點處理。「安全設計」的實質內容在此。
What the user-facing documentation must actually contain.對使用者文件實質要求的內容。
23 categories: identity management, browsers, password managers, antivirus, VPNs, NMS, SIEM, boot managers, PKI, network interfaces, OS, routers, MCU/MPU/ASIC/FPGA with security functions, smart home assistants, smart locks/cameras, connected toys, wearables. Plus 4 Class II categories.23 項類別：身份管理、瀏覽器、密碼管理、防毒、VPN、NMS、SIEM、開機管理、PKI、網路介面、作業系統、路由器、具安全功能之 MCU/MPU/ASIC/FPGA、智慧家庭助理、智慧門鎖 / 攝影機、連網玩具、穿戴。加 4 項 Class II。
Three categories: hardware devices with security boxes (HSM-class), smart meter gateways, smartcards / secure elements. Conformity assessment under Article 32(2)(c) may require EUCC certification at "high" assurance level — the strictest path in the entire CRA framework.三項類別：具安全盒之硬體裝置（HSM 等級）、智慧電表 gateway、智慧卡 / secure element。第 32(2)(c) 條下的合規評鑑可能要求「高」保證等級的 EUCC 認證，整個 CRA 框架中最嚴的路徑。
The 8 mandatory information items in the EU DoC. Cross-referenced from Article 28. Required for every CRA-compliant product. Format follows NLF Decision 768/2008/EC template.EU DoC 的 8 項強制資訊。由第 28 條交叉引用。每個 CRA 合規產品必備。格式遵循 NLF Decision 768/2008/EC 模板。
The abbreviated DoC that physically accompanies the product or is referenced via URL. Two sentences plus a URL pointing to the full Annex V DoC. Required by Article 13(20). The form most APAC manufacturers will print on packaging or include in product literature.隨附產品或透過 URL 引用之精簡形式 DoC。兩句話加上指向完整附件五 DoC 的 URL。第 13(20) 條所要求。多數 APAC 製造商會實體印在包裝上或放在產品文件中的形式。
The complete list. Line by line.完整清單。逐項。
Internal production control. EU type-examination. Conformity based on full quality assurance. The three routes.內部生產控制、歐盟型式檢驗、基於完整品保的符合性驗證，三條路徑。