Skip to content
Close
Contact Us
Contact Us
What's Inside the Roadmap

Could Your Team Meet the 24-Hour Reporting Deadline?

CRA reporting obligations already apply. Use this practical checklist to assess your reporting process, identify operational gaps, and prioritize what needs attention.

Get the Free Checklist
CRA-MOCKUP-1
WHAT'S INSIDE THE CHECKLIST

Know what to report. Check whether your team is ready.

From product scope to reporting evidence, this checklist helps you review the people, decisions, and workflows needed to respond under pressure.

1

Confirm Product Scope

Check whether Article 14 applies to your products, including relevant exemptions and legacy products.

2

Identify Reportable Events

Distinguish actively exploited vulnerabilities from severe incidents affecting product security.

3

Understand Reporting Timelines

Review the 24-hour early warning, 72-hour notification, and final-report requirements.

4

Check Ownership & Escalation

Review accountable owners, backup coverage, decision authority, and access to the reporting platform.

5

Prepare Your Evidence

Identify the product details, awareness records, impact assessments, and mitigation information to keep ready.

6

Spot Operational Gaps

Use the readiness checks and common pitfalls to identify where immediate action may be needed.

image-23

This checklist is for you if...

  • Vector-1
    You manufacture products with digital elements made available on the EU market and need to assess your reporting obligations.
  • Group
    You work in product security, engineering, legal, or compliance and need clear reporting responsibilities.
  • Vector (1)
    You have policies in place but want to check whether your team could act within the required timelines.

Already Have a Reporting Process?

Use the checklist to review it with your team. Check for gaps in ownership, out-of-hours coverage, event classification, reporting access, and evidence collection.

nemko-logo

Already Have a Reporting Process?

Established by the Norwegian government in 1933, Nemko has 90+ years of heritage in testing, inspection, and certification. With 850+ employees across 28 locations on 3 continents, we serve 7,000+ customers in over 150 countries.

Frequently Asked Questions

Is the checklist free?

Yes. Complete the short form to download the PDF and use it with your team.

Does Article 14 apply before December 2027?

Yes. Article 14 reporting obligations have applied since September 11, 2026. They cover actively exploited vulnerabilities and severe incidents affecting the security of in-scope products with digital elements.

Will completing the checklist make us compliant?

The checklist helps you assess readiness and identify gaps. Compliance depends on your products, applicable obligations, and the processes your organization puts into practice.

Check Your Article 14 Reporting Readiness

Review your reporting responsibilities, escalation process, and evidence requirements before your team needs to act.

Get the Free Checklist