Who receives the reports submitted through the platform?

As a general rule, when a manufacturer submits a notification through the CRA SRP, it is simultaneously made available to:

• The CSIRT (Computer Security Incident Response Team) designated as coordinator in the relevant Member State; and
• ENISA (unless particularly exceptional circumstances apply).

The CSIRT designated as coordinator that initially receives the notification is then responsible for disseminating it without delay to other relevant CSIRTs across the EU via the platform.