CRA COMPLIANCE · EN

ENISA Single Reporting Platform — operational SRP guide

SRP is the official notification channel. CRACompliance prepares and retains internal work; it is not ENISA, a CSIRT or an automatic SRP submission service.

Versioned operational guidance

ENISA upgraded SRP to 1.1 on 12 October 2026. Keep source, version and last verification with the workflow. Operational manuals and FAQs explain platform use; they do not add a new legal reporting obligation.

People, jurisdiction and stages

Check the competent CSIRT and manufacturer association. Retain the creator of private drafts and the AR responsible for each submitted stage. Submitted-case collaboration follows the current manual; do not assume an older interface page remains authoritative.

After submission

Record submission and CSIRT validation separately. Invalid cases require a reason, remediation owner and resubmission review. Record dissemination and visibility as user-confirmed evidence, not automatically observed state. Preserve historical final-report content even while remediation continues.

Next steps

Official sources and review context

Regulation (EU) 2024/2847 · European Commission · ENISA SRP

CRA-I18N-2026-10-14-DRAFT-4

Operational tools and retained records. No legal opinion, conformity assessment, certification or confirmation of CRA compliance is generated.