Smart Devices: Manufacturers will have to assess the cybersecurity risks of their products, provide declarations of conformity and take appropriate action to fix problems during the expected lifetime of the product or for a period of at least five years.