Cyber Resilience Act
The product was secure at launch. That is no longer the question.
Connected products do not remain in one cybersecurity state. Updates, dependencies, support conditions and installed-base divergence mean assurance must be governed throughout the lifecycle