The first of the proposed EU #standards for #CRA compliance for product categories has been published for public (= NSO) review. It covers "Cybersecurity requirements for boot managers" and can be found at https://www.etsi.org/deliver/etsi_en/304600_304699/304623/00.01.03_20/en_304623v000103ev.pdf
No paywall. #OpenSource people helped write it. Feedback only to your national standards body please, not to me or to ETSI. There will be a bunch of these.