Knowledge
August 24, 2026
Part 1 | First to Apply, Top Penalty Tier: Inside CRA Article 14 Reporting Obligations
EU Cyber Resilience Act (CRA) Article 14 applies from 11 September 2026, well ahead of the 11 December 2027 general application date. This article breaks down the reporting duties for actively exploited vulnerabilities and severe incidents, the 24-hour / 72-hour / 14-day / one-month statutory deadlines, the top penalty tier, and the misreadings we see most often among manufacturers.
Read more →