Key Facts
ENISA launched the Cyber Resilience Act Single Reporting Platform on September 11, when the regulation’s reporting obligations began applying to manufacturers.
Technical Details
Help Net Security reports that manufacturers use the portal to report actively exploited vulnerabilities and severe incidents to a coordinating national CSIRT. An early warning is due within 24 hours of awareness, followed by a 72-hour notification and final reporting timelines specified by the CRA.
Impact & Mitigation
Manufacturers placing products with digital elements on the EU market should establish internal escalation, triage, and reporting workflows now. Confirm organization access and reporting responsibilities through the ENISA portal.