The Cyber Resilience Act reporting obligations (Article 14) start applying 11 September 2026. This tool turns those requirements into a working process you can actually run under pressure — a RACI, the 24h/72h/final-report workflow, an incident-intake template, escalation & approval steps, a standard operating procedure and an evidence checklist. Then rehearse it with a built-in tabletop drill. Fill it in, generate, print — all in your browser.
operational, not legal advice This produces an operational template. It is not legal or security advice; verify against the current CRA text and delegated/implementing acts. Provisional items are marked.
R = Responsible · A = Accountable · C = Consulted · I = Informed
Pick a scenario and step through the clock. For each step, choose your action, then reveal the model answer and self-score. At the end you get a drill record you can print as evidence that the process was exercised.