Article 25 — Security attestation of free and open-source software

Source: OJ L, 20.11.2024 (CELEX 32024R2847). The only authentic version of this text is the one published in the Official Journal of the European Union.

Article 25 — Security attestation of free and open-source software

Source: OJ L, 20.11.2024 (CELEX 32024R2847). The only authentic version of this text is the one published in the Official Journal of the European Union. This page reproduces the EN-language consolidated text for reference; it is not a substitute for the OJ.

In order to facilitate the due diligence obligation set out in Article 13(5), in particular as regards manufacturers that integrate free and open-source software components in their products with digital elements, the Commission is empowered to adopt delegated acts in accordance with Article 61 to supplement this Regulation by establishing voluntary security attestation programmes allowing the developers or users of products with digital elements qualifying as free and open-source software as well as other third parties to assess the conformity of such products with all or certain essential cybersecurity requirements or other obligations laid down in this Regulation.