Article 14 Self-Assessment — reporting process readiness
Assess your operational reporting process without disclosing vulnerability details, SBOMs or confidential incident evidence.
Pricing
VAT is calculated at checkout from buyer details. Stripe processes payment.
- Amount and product are verified server-side.
- A verified payment webhook activates access.
- We do not store card details.
What the assessment covers
Answer questions about ownership and backup, intake, human triage, awareness capture, 24h/72h escalation, final reports, user communication and retained records.
What you receive
A saved assessment, a readiness indicator, critical gaps and prioritised actions with rule/source references. Completed results are versioned snapshots; eligible corrections create a new version rather than overwrite history.
What it does not do
It does not decide whether a particular incident must be reported, submit a notification, inspect your systems or issue a legal opinion. Use the reportability checker for preliminary trigger review and record the actual decision in your incident workflow.
Next steps
Official sources and review context
Regulation (EU) 2024/2847 · European Commission · ENISA SRP
CRA-I18N-2026-10-14-DRAFT-4
Operational tools and retained records. No legal opinion, conformity assessment, certification or confirmation of CRA compliance is generated.