Processing
A report submitted through the selected Slovak channel is processed in connection with the SRP and made available to relevant CSIRTs in Member States where the product was made available and, where necessary, market-surveillance authorities. In particularly exceptional circumstances, dissemination may be delayed or restricted on justified cybersecurity grounds under CRA Article 16 and the relevant delegated act.
Manufacturer work continues
- continue investigating and update the submission according to the selected channel’s instructions;
- prepare and distribute an update or mitigation securely;
- retain the timeline, evidence, decisions, communications and fix versions;
- retain the internal case file under applicable documentation rules.
Where necessary to mitigate impact, inform affected users without undue delay and, where appropriate, explain actions they can take. Identify the affected product/version, risk, temporary mitigation, fix, trusted update source and support status.