[open-regulatory-compliance] Fwd: ENISA updates: CRA SRP FAQ and technic

[Juan Rico <juan.rico@xxxxxxxxxxxxxxxxxxxxxx>]

Dear ORC Community,

find below the message the European Commission shared earlier today with two important aspects:

- The single reporting platform and its updated FAQ- I'm happy to confirm that the Eclipse Foundation has been selected as early tester in July

- Technical advisory on secure update mechanisms with a public consultation associated to it. 

In our next SIG meeting we will comment about both topics.

Cheers,

Juan

---------- Forwarded message ---------
From: CNECT-CRA@xxxxxxxxxxxx <CNECT-CRA@xxxxxxxxxxxx>
Date: Tue, 2 Jun 2026 at 18:09
Subject: ENISA updates: CRA SRP FAQ and technical advisory
To: CNECT-CRA@xxxxxxxxxxxx <CNECT-CRA@xxxxxxxxxxxx>

Dear CRA Network,

 

Please find below a couple of updates from ENISA that are relevant for the implementation of the CRA and product security.

 

Updated FAQ on the CRA Single Reporting Platform

ENISA published an updated FAQ on the CRA Single Reporting Platform, which includes valuable information concerning the procedures for reporting under Article 14 of the CRA. Notably, the FAQ includes the data fields to be filled in as part of the reporting (Q 16), as well as additional details on when further information will be made available.

 

Draft Technical Advisory on Secure Update Mechanisms

ENISA published for consultation its second technical advisory on secure update mechanisms, designed to help micro, small, and medium-sized manufacturers understand common update lifecycle threats and implement practical controls to mitigate risks and ensure secure delivery. The public consultation window is open until 10 July 2026.

 

Best wishes,

CRA team