OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)··Retrieved 2 November 2026·View on EUR-Lex
You are reading a consolidation made by regulation-cra.eu: the Official Journal text with its corrigenda and the amendments made by Regulation (EU) 2025/327 to Articles 13(4), 31(3) and 32(5a), which apply from 26 March 2027 (date to be verified). It is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources
OFFICIAL TEXTVerbatim, as published. Not rewritten.
(65)
Manufacturers should notify simultaneously via the single reporting platform both the computer security incident response team (CSIRT) designated as coordinator as well as ENISA of actively exploited vulnerabilities contained in products with digital elements, as well as severe incidents having an impact on the security of those products. The notifications should be submitted using the electronic notification end-point of a CSIRT designated as coordinator and should be simultaneously accessible to ENISA.
regulation-cra.eu/regulation/recitals/65 · Regulation (EU) 2024/2847 · EN · OJ L, 2024/2847, 20.11.2024 · retrieved 2026-11-02 · Only the Official Journal text is authentic.
Audience measurement
We would like to count visits on our own server (pseudonymous identifier, pages viewed, downloads) to learn which content is useful. No advertising, no third-party tracker. Your choice does not change access to the content. Privacy policy