Manufacturers should notify simultaneously via the single reporting platform both the computer security incident response team (CSIRT) designated as coordinator as well as ENISA of actively exploited vulnerabilities contained in products with digital elements, as well as severe incidents having an impact on the security of those products. The notifications should be submitted using the electronic notification end-point of a CSIRT designated as coordinator and should be simultaneously accessible to ENISA.
Source: Regulation (EU) 2024/2847 (Cyber Resilience Act), consolidated EN text (OJ L, 2024/2847, 20.11.2024; Official Journal of the EU). This page is AI-generated legal information, not legal advice. Verify against the Official Journal. Contact: yiango@proton.me