Record the investigation
Capture the facts, affected releases, investigation steps and the documented time your team became aware of the issue.
Incident readiness
Prepare your team for a reportable incident.
Record the investigation, assess reporting duties and prepare notification drafts with the facts you have. Your team reviews and submits the notification.
Assess duties and deadlines
Early warning: within 24 hours of becoming aware of a reportable actively exploited vulnerability or severe security incident. Full notification: within 72 hours of becoming aware.
Prepare, review and submit
Prepare notification drafts from the known facts. Your team reviews and submits them. The final report is due within the applicable CRA deadline and the history remains traceable.
Final report: for actively exploited vulnerabilities, no later than 14 days after a corrective measure is available; for severe incidents, within one month of the 72-hour notification. Source: European Commission, CRA reporting obligations.
Incident workflow
Gateway X · Investigation
- Investigation
- Open · awareness time recorded
- Reporting duty
- Under review by the team
- Notification
- Draft prepared · not submitted