安全信息与事件管理（SIEM）系统
汇集多源数据进行分析关联，输出可用于处置的安全信息。
类别解释
Security information and event management (SIEM) systems
此类产品从多个来源收集数据，对数据进行分析和关联，并将其呈现为可供采取行动的安全相关信息，例如用于威胁和事件检测、取证分析或合规目的。
English
These products collect data from multiple sources, analyse and correlate that data and present it as actionable information for security purposes such as threat and incident detection, forensic analysis or compliance.
CRA 附件三 I 类，技术描述见实施条例 (EU) 2025/2392 附件一第 1–19 项
Class I of Annex III to the CRA, with technical descriptions in Annex I, points 1–19, of Implementing Regulation (EU) 2025/2392
制造商可采用协调标准（或技术规范）证明符合性，据此完成内部合格评定；未适用协调标准时，须按模块 B+C 或模块 H 由公告机构参与评定。
Manufacturers may demonstrate conformity through harmonised standards or technical specifications and self-assess; where no harmonised standard is applied, Module B+C or Module H with a notified body applies.
重要产品 · I 类的主要义务
在默认类别要求基础上，针对该类别核心功能落实更严格的安全设计与默认安全配置。
按所选路径完成合格评定，保留技术文档、风险评估与测试证据以备市场监管核查。
建立结构化的漏洞处理流程，并在支持周期内持续发布安全更新。
English
- On top of the baseline obligations, apply stricter secure-by-design and secure-by-default measures for the core functionality.
- Complete the conformity assessment on the chosen route and keep technical documentation, risk assessments and test evidence for market surveillance.
- Operate a structured vulnerability handling process and release security updates throughout the support period.