Recital 43 Important products

Products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; should be considered to be important if the negative impact of the exploitation of potential vulnerabilities means a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat; in the product can be severe due to, inter alia, the cybersecurity-related functionality or a function carrying a significant risk means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; of adverse effects in terms of its intensity and ability to disrupt, control or cause damage to a large number of other products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; or to the health, security or safety of its users through direct manipulation, such as a central system function, including network management, configuration control, virtualisation or processing of personal data means personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679;. In particular, vulnerabilities means a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat; in products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that have a cybersecurity-related functionality, such as boot managers, can lead to a propagation of security issues throughout the supply chain. The severity of the impact of an incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; may also increase where the product primarily performs a central system function, including network management, configuration control, virtualisation or processing of personal data means personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679;.