Cyber Resilience Act reporting since 11 September 2026: a checklist for small software vendors

The CRA reporting duty applies since 11 September 2026: what counts, the 24 h, 72 h and 14-day clock, ENISA's platform, and a small-team setup.