---
title: "EN 40000-1-2 heads for ratification: first horizontal CRA standard | Edge SDN"
description: "The CEN-CENELEC work programme shows EN 40000-1-2, Principles, product risk management and lifecycle activities, together with EN 40000-1-1, Vocabulary, at the approval stage with the formal vote closed on 1 October 2026 and ratification planned for 2 November 2026. EN 40000-1-2 answers line 1 of st"
url: https://www.edge-sdn.com/regulations/cyber-resilience-act/news/2026-10-en-40000-1-2-formal-vote-closed/
last_updated: 2026-10-16
---

# EN 40000-1-2 heads for ratification: first horizontal CRA standard

- Affected: EN 40000-1-2 and EN 40000-1-1; New machines from 11 Dec 2027
- Status: Formal vote (CEN-CENELEC JTC 13 WG 9)
- Date: 1 October 2026
- Practical impact: Standard milestone, read and align

## What happened

The CEN-CENELEC work programme shows EN 40000-1-2, Principles, product risk management and lifecycle activities, together with EN 40000-1-1, Vocabulary, at the approval stage with the formal vote closed on 1 October 2026 and ratification planned for 2 November 2026. EN 40000-1-2 answers line 1 of standardisation request M/606. The vulnerability handling standard prEN 40000-1-3 follows, with a shortened four-week formal vote announced by CEN-CENELEC on 2 October 2026.

## What it means for machine builders

EN 40000-1-2 is the frame every manufacturer will be measured against: how you run product risk management and the lifecycle activities behind the Annex I requirements. When it is ratified you can buy it and structure your technical documentation on it, even before any citation in the Official Journal. Note that the CEN project pages currently say no citation is expected for these two parts; we are checking that with CEN-CENELEC and will correct this item if needed. Compliance managers should budget for the standard in November and for prEN 40000-1-3 early in 2027.

Official source: [CEN-CENELEC JTC 13 work programme](https://standards.cencenelec.eu/ords/f?p=205:22:::::FSP_ORG_ID,FSP_LANG_ID:2307986,25)

Published 16 October 2026 by Edge SDN. Edited by Edge SDN. A summary, not legal advice. Always check the official text for your case.