The regimes behind every note
Four regimes, each note cited to the applicable clause; Commission Implementing Regulation (EU) 2025/2392, the technical descriptions of the Annex III and IV categories; harmonised standards under the Cyber Resilience Act; IEC 62443-4-2 (security for industrial automation components); the NIST IR 8259 series and NIST's recommended criteria for consumer IoT labelling are named, not quoted.