Dispatches
CRA Article 14 defines the reporting clock. But another interval matters first: how long does it take an organisation to recognise that an ordinary operational signal may have become a regulatory question?
A hospital fire reveals how individually governed systems can create combined safety conditions. What Turku teaches us about Product Integrity, evidence, system interaction and the revised EU Product Liability Directive.
Connected products do not remain in one cybersecurity state. Updates, dependencies, support conditions and installed-base divergence mean assurance must be governed throughout the lifecycle
From 11 September 2026, the Cyber Resilience Act begins creating a timed regulatory record of what manufacturers know about actively exploited vulnerabilities and severe security incidents. That evidence may later matter far beyond cybersecurity compliance.
The internal translation layer: where product safety signals become organisational decisions
Before a public alert appears, organisations must detect, interpret, escalate and classify emerging product safety signals. This article examines how that journey works across the EU, Great Britain and Northern Ireland.
A data centre can have world-class redundancy and still lack a complete account of what actually existed when something went wrong.