Upcoming deadlines
T–30: mandatory reporting under the Cyber Resilience Act
EU · Cybersecurity and digital products · Upcoming legal deadline
There are 30 days left until the start of mandatory reporting under the Cyber Resilience Act. From 11 September 2026, manufacturers of covered hardware and software products must report actively exploited vulnerabilities and severe incidents via the ENISA single platform. An early warning is submitted within 24 hours of becoming aware of it, and a full notification within 72 hours. This is a reminder of deadlines, not a new piece of legislation. Organisations should confirm the product scope, responsible teams and CSIRT coordinator, prepare EU Login and check that their processes can collect the required data and evidence within the short timeframe.
„"A publication by MG Global in partnership with ERPI."“
English 
Български