--- title: How Teleport Operationalizes the EU Cyber Resilience... description: Teleport's blog maps its identity, access, and audit capabilities to ENISA's Secure by Design and Default Playbook, which operationalizes the EU Cyber... canonical: https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate | daily.dev og:description: Teleport's blog maps its identity, access, and audit capabilities to ENISA's Secure by Design and Default Playbook, which operationalizes the EU Cyber... og:url: https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw og:image: https://api.daily.dev/og/posts/HHN8JuabW.png og:image:alt: How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate **[Teleport](https://daily.dev/sources/teleport)** · 16 min read · 0 upvotes · 0 comments ## Summary Teleport's blog maps its identity, access, and audit capabilities to ENISA's Secure by Design and Default Playbook, which operationalizes the EU Cyber Resilience Act's security requirements. It covers cryptographic identity replacing static credentials, deny-by-default RBAC, just-in-time access, hardware-backed device trust, immutable audit logging with AI risk scoring, secure communication defaults, unified access controls, access governance, and agentic identity for AI workloads. The piece notes ENISA's Playbook reaches version 1.0 with a phase-1 baseline of eight priority playbooks, five of which are access-layer controls that Teleport claims to address, alongside a broader mapping to 19 of 22 total playbooks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### When does the EU Cyber Resilience Act's incident reporting obligation take effect and when do the main obligations apply? Incident and vulnerability reporting obligations under the EU Cyber Resilience Act apply from September 2026, while the main obligations of the regulation apply from December 2027. Organizations building or selling products with digital elements in the EU should begin preparations for both deadlines now, since the reporting requirement arrives well before full enforcement. _Teams tracking CRA deadlines can follow related compliance and security coverage on daily.dev._ ### What are the phase-1 priority playbooks in ENISA's Secure by Design and Default Playbook version 1.0? ENISA's version 1.0 playbook names eight priority playbooks to implement first, and five of them are access-layer controls: logging, monitoring and alerting (4.10), supply-chain controls (4.14), restrictive initial access (4.16), secure communication by default (4.17), and unique device identity and secrets by default (4.18). This is an expansion beyond the March 2026 v0.4 consultation draft, which did not specify implementation priority. _Developers scoping CRA-aligned architecture can track playbook updates like this via daily.dev._ ### How does Teleport replace static SSH keys and API tokens with certificate-based authentication? Teleport issues short-lived X.509 certificates from its internal Certificate Authority for every human and machine identity, eliminating SSH keys, database passwords, and long-lived API tokens entirely. Certificates are bound to a specific user or service, expire automatically after task completion, and require mutual TLS so both client and server authenticate, architecturally preventing man-in-the-middle attacks and removing credentials that need rotation or vaulting. _Engineers evaluating credential-less access architectures can compare approaches like this on daily.dev._ ## Similar posts on daily.dev - [Teleport Launches Agentic Identity Framework to Secure AI Agents Across Enterprise Infrastructure](https://daily.dev/posts/teleport-launches-agentic-identity-framework-to-secure-ai-agents-across-enterprise-infrastructure-vosijavmu) · InfoQ · 0 upvotes · 0 comments --- Tags: [#cloud](https://daily.dev/tags/cloud), [#compliance](https://daily.dev/tags/compliance) [View this post on daily.dev](https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate","url":"https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw"},"datePublished":"2026-08-23T12:19:21.472Z","dateModified":"2026-08-24T06:51:30.502Z","description":"Teleport's blog maps its identity, access, and audit capabilities to ENISA's Secure by Design and Default Playbook, which operationalizes the EU Cyber...","image":"https://media.daily.dev/image/upload/s--OHB84bZF--/f_auto/v1722860399/public/Placeholder%2010","thumbnailUrl":"https://media.daily.dev/image/upload/s--OHB84bZF--/f_auto/v1722860399/public/Placeholder%2010","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,compliance","timeRequired":"PT16M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-hhn8juabw#faq","mainEntity":[{"@type":"Question","name":"When does the EU Cyber Resilience Act's incident reporting obligation take effect and when do the main obligations apply?","acceptedAnswer":{"@type":"Answer","text":"Incident and vulnerability reporting obligations under the EU Cyber Resilience Act apply from September 2026, while the main obligations of the regulation apply from December 2027. Organizations building or selling products with digital elements in the EU should begin preparations for both deadlines now, since the reporting requirement arrives well before full enforcement. Teams tracking CRA deadlines can follow related compliance and security coverage on daily.dev."}},{"@type":"Question","name":"What are the phase-1 priority playbooks in ENISA's Secure by Design and Default Playbook version 1.0?","acceptedAnswer":{"@type":"Answer","text":"ENISA's version 1.0 playbook names eight priority playbooks to implement first, and five of them are access-layer controls: logging, monitoring and alerting (4.10), supply-chain controls (4.14), restrictive initial access (4.16), secure communication by default (4.17), and unique device identity and secrets by default (4.18). This is an expansion beyond the March 2026 v0.4 consultation draft, which did not specify implementation priority. Developers scoping CRA-aligned architecture can track playbook updates like this via daily.dev."}},{"@type":"Question","name":"How does Teleport replace static SSH keys and API tokens with certificate-based authentication?","acceptedAnswer":{"@type":"Answer","text":"Teleport issues short-lived X.509 certificates from its internal Certificate Authority for every human and machine identity, eliminating SSH keys, database passwords, and long-lived API tokens entirely. Certificates are bound to a specific user or service, expire automatically after task completion, and require mutual TLS so both client and server authenticate, architecturally preventing man-in-the-middle attacks and removing credentials that need rotation or vaulting. Engineers evaluating credential-less access architectures can compare approaches like this on daily.dev."}}]} ```