CRA incident readiness assessment

This decision-support tool will assess potential reporting signals locally in your browser.

CRA Incident Readiness by Centulon

This tool helps organisations assess potential CRA incident-reporting signals and identify practical next steps.

The assessment runs locally in your browser. Answers are not sent to Centulon.

Centulon provides practical cybersecurity and regulatory-readiness support if you want additional help.

No account. Answers stay in this browser tab and are not sent to Centulon.

CRA relevanceDoes the event concern a product with digital elements made available on the EU market in commercial activity?Is the product's CRA applicability already confirmed?

Organisation roleWhat is your organisation's role?

What is currently known about the event? Select all that apply. A vulnerability has been identified. There is evidence or suspicion that a vulnerability has been exploited. Malicious code has been introduced or executed. The security of the product has been compromised. Sensitive or important data or functions may have been affected. The event primarily concerns service availability. The exact nature of the event is not yet known.

Actively exploited vulnerabilityHas a vulnerability been identified?Evidence of exploitation?Did exploitation occur without permission?Is the vulnerability contained in the product?

Severe incidentHas the incident negatively affected, or could it affect, protection of sensitive or important data or functions?Does the impact concern sensitive or important data or functions?Has malicious code been introduced or could it be introduced or executed?Location?

When did the organisation first become aware of the facts indicating the potentially reportable event?

Optional. Select a date, time and timezone offset to calculate the applicable reporting deadlines rather than entering an ISO value.

Date and timeTimezone offset