The Cyber Resilience Act, conceived as a product security regulation on software, will mandate a CE mark on software products.