Skip to content
TWO FREE CRA CHECKLISTS

Check Your Reporting Readiness. Plan Your Next CRA Steps.

Get a structured CRA readiness checklist alongside a focused Article 14 reporting checklist. Review what your team needs in place now and identify the next actions for your wider CRA program.

2 CRAs
WHAT'S INCLUDED

Two checklists. A clearer view of your CRA priorities.

Preparing for the EU Cyber Resilience Act outlines six stages of readiness work. The CRA Article 14 Reporting Readiness Checklist takes a closer look at reporting scope, deadlines, responsibilities, and evidence.

Together, they help your team review these six areas:
1

Product Scope & Applicability

Identify relevant products and review whether CRA and Article 14 obligations apply.

2

Governance & Ownership

Align stakeholders and clarify who owns readiness, reporting decisions, and escalation.

3

Gaps & Priorities

Review existing capabilities and identify the actions that need attention first.

4

Vulnerability & Incident Processes

Assess vulnerability intake, triage, incident classification, and reporting workflows.

5

Testing & Reporting Readines

Review escalation timelines, reporting access, backup coverage, and supporting evidence.

6

Monitoring & Improvement

Maintain vulnerability handling, track relevant developments, and keep your readiness work moving.

image-23

This checklists are for you if...

  • Vector-1
    Your organization manufactures products with digital elements for the EU market and needs a structured starting point.
  • Group
    Your security, engineering, legal, and compliance teams need a shared view of CRA priorities.
  • Vector (1)
    You want to review current reporting readiness alongside the work needed for your wider CRA program.

Already Started Your CRA Program?

Use both checklists to review your progress. Compare your wider readiness plan with the operational details of Article 14 reporting to identify gaps between documented processes and day-to-day capability.

nemko-logo

Already Have a Reporting Process?

Established by the Norwegian government in 1933, Nemko has 90+ years of heritage in testing, inspection, and certification. With 850+ employees across 28 locations on 3 continents, we serve 7,000+ customers in over 150 countries.

Frequently Asked Questions

What will I receive?

Two free PDFs: Preparing for the EU Cyber Resilience Act and the CRA Article 14 Reporting Readiness Checklist.

How are the two checklists different?

Preparing for the EU Cyber Resilience Act provides a structured readiness framework covering governance, applicability, gap analysis, implementation, testing, and monitoring. The Article 14 checklist focuses on vulnerability and incident reporting, including deadlines, ownership, escalation, and evidence.

Which checklist should I start with?

If your immediate concern is reporting capability, start with the Article 14 checklist. If you need to organize or review your wider readiness work, start with Preparing for the EU Cyber Resilience Act, then use the Article 14 checklist for a closer reporting review.

Give Your Team a Clearer CRA Starting Point

Review your wider readiness work and take a closer look at the reporting processes that already need to be operational.