ETSI has published EN 304 635 V1.0.1 (2026-06), which specifies cybersecurity requirements and assessment criteria for virtualisation and container technology. The standard has been developed in the context of the EU Cyber Resilience Act (CRA) and focuses on the security of products and components using virtualisation and containers.

The document covers security requirements for virtualisation platforms and container solutions, with a focus on identifying and addressing cybersecurity risks.

You can find the document here: EN 304 635 V1.0.1 (2026-06)

All feedback and comments are welcome by 15 September 2026.