Cyber Resilience Act
When Information Becomes Awareness
CRA Article 14 defines the reporting clock. But another interval matters first: how long does it take an organisation to recognise that an ordinary operational signal may have become a regulatory question?