Article 14 readiness

From 11 Sep 2026 the CRA requires manufacturers to report actively exploited vulnerabilities and severe incidents via ENISA’s Single Reporting Platform on a 24h / 72h / 14-day cascade.

Resilic prepares that workflow: correlation flags actively-exploited matches on your fleet, triage records your judgement, and the report editor drafts the ENISA fields for a human to review, approve, and submit. Resilic never submits for you — the final action is always yours.

Article 14 readiness is not full CRA compliance: the Article 13 / Annex I duties apply from 11 Dec 2027 and are covered by the compliance features, not the reporting workflow.