Manufacturers – prepare in advance for reporting vulnerabilities and incidents under the Cyber Resilience Act

Before the CRA reporting obligations start to apply, organisations should prepare internally for submitting notifications. The reporting deadlines are short, so it is important to agree on responsibilities and procedures before the first reportable case occurs. We have compiled a checklist for manufacturers and links to key guidance.