TrustCB, part of NMi Group, has received accreditation from the Dutch Accreditation Council (RvA) for EU-type examination (Module B) under the EU Cyber Resilience Act (CRA), marking an important step towards expanding independent CRA conformity assessment capacity for manufacturers of products with digital elements.
Accreditation C651 is valid from 26 August 2026 and covers EU-type examination (Module B, Annex VIII, Part II) under EN ISO/IEC 17065:2012 for all four CRA product categories: default, important Class I, important Class II, and critical products.
For manufacturers, the significance is practical. As the CRA moves into implementation, the focus needs to shift from simply understanding whether the regulation applies to determining how each product will demonstrate conformity and what needs to be in place to do so.
The conformity assessment route depends on how a product is classified under the CRA.
Most products with digital elements fall into the default category and can be self-assessed by the manufacturer. Important products are subject to stricter requirements and may require a notified body, while critical products require third-party conformity assessment.
Examples range from general IoT products and applications through to operating systems, network equipment, firewalls, hypervisors, smartcards and secure elements.
For manufacturers, this makes product classification an important first step. It determines the applicable conformity route and whether independent assessment will form part of the route to CE marking.
TrustCB’s accreditation includes Module B EU-type examination, which is one of the CRA’s third-party conformity assessment routes.
RvA accreditation confirms TrustCB’s technical competence within its CRA-accredited scope and is a key step towards becoming a CRA Notified Body. Accreditation does not itself confer Notified Body status.
TrustCB is now progressing through the formal designation and notification process with the relevant Dutch authorities. Once completed and approved, TrustCB will be listed in the European Commission’s NANDO database for Regulation (EU) 2024/2847, enabling it to provide notified-body conformity assessment within its approved scope.
This will give manufacturers requiring independent third-party assessment another route to progress their products towards CRA conformity and CE marking.
We will provide a further update once the notification process is complete.
The CRA is being introduced in stages.
11 September 2026
Vulnerability and severe incident reporting obligations begin to apply.
11 December 2026
The European Commission’s implementation timeline calls for sufficient conformity assessment bodies to have been notified across Member States.
11 December 2027
The CRA becomes fully applicable.
Manufacturers should not wait until December 2027 to begin preparations.
Products requiring third-party assessment must have the necessary technical documentation, cybersecurity evidence, and conformity assessment route established before demonstrating compliance.
The immediate priority is to determine:
TrustCB’s accreditation brings NMi Group another step closer to providing manufacturers with a more complete route through CRA compliance.
Through NMi’s Blue Seal approach, manufacturers can access regulatory advisory expertise from NMi Certin and cybersecurity testing from NMi Testlab within its existing accredited scope, including EN 18031 and relevant ETSI standards under RED. TrustCB brings independent certification expertise and is progressing through the formal designation and notification process for CRA conformity assessment.
These roles remain distinct, while helping manufacturers navigate the journey from understanding regulatory requirements and identifying gaps to generating technical evidence and, where required, independent conformity assessment.
Begin with the NMi CRA Scorecard to assess your product’s classification and current readiness, and to identify the next steps toward CRA compliance.
Thijsseweg 11
2629 JA Delft, The Netherlands
Tel: +31 88 636 2332
E-mail: nmi@nmi.nl
The NMi Group provides premium ATICC services, ensuring reliable measurement systems, fair trade, and public confidence.
