ENISA CRA SRP Q&A

ENISA FAQ on the Cyber Resilience Act Single Reporting Platform for vulnerability and incident reporting.

Authority	ENISA
Q&A ID	ENISA CRA SRP FAQ
Topic	CRA Single Reporting Platform
Legal basis	Articles 14, 15, 16 and 17 CRA
Status	FAQ
Published	2026 source page
Source	ENISA SRP FAQ

Question

What does ENISA's CRA Single Reporting Platform FAQ explain?

Final answer

ENISA explains that the CRA Single Reporting Platform is intended as the technical tool for reporting actively exploited vulnerabilities and severe incidents affecting products with digital elements in the EU Digital Single Market. The FAQ links the platform to CRA Article 16 and describes the platform as a single entry point for manufacturers and open-source software stewards, with ENISA responsible for establishing and maintaining the platform.

This record is a source-orientation object only. It preserves the official source and relevant CRA article links; it does not reproduce the full ENISA FAQ.

Related

• CRA Article 14 — reporting obligations of manufacturers.
• CRA Article 16 — single reporting platform.
• CRA Article 17 — other reporting provisions.