Cyber Resilience Act step by step: readiness for manufacturers

A practical CRA readiness path for manufacturers: confirm scope and classification, close Annex I gaps, run vulnerability handling and reporting, and plan conformity assessment and CE marking before December 2027.
One incident, four clocks: NIS2, DORA, CRA and GDPR reporting

A single cyber incident can trigger four reporting clocks. This playbook compares the deadlines, walks you through classification and lists the Belgian, Dutch and Luxembourg recipients.