Incident Reporting

When something goes wrong, the clock starts. We keep it in view.

Deadline clocks for the CRA, NIS2, DORA and the GDPR, pre-filled report drafts and a signed record of every filing, so a serious incident does not turn into a missed deadline.

Since 11 September 2026, makers of products with digital elements must give the authorities an early warning within 24 hours of learning that a vulnerability in their product is being exploited. NIS2, DORA and the GDPR have their own clocks. Under stress, the deadline is the part that gets missed. Incident Reporting keeps every clock visible and every step written down.

24 hFirst warning under CRA Article 14
72 hGDPR notice to the supervisor
SignedRecord of what you filed and when

What it gives you

Clocks, drafts and a record, in one place.

A clock per law

Open an incident and the deadlines that apply start counting: CRA Article 14, NIS2 Article 23, DORA Article 19 and the GDPR’s 72-hour notice. Alerts go out before each one is due.

Your product register

List the products the CRA applies to, so the right clock starts for the right product.

Pre-filled drafts

Drafts that follow the fields of ENISA’s single reporting platform, filled from what you have already recorded. You check them and submit them yourself.

A filing record

Each filing is recorded with its time and content, and the record can only be added to, never changed.

Your security contact, checked daily

SkyQon checks your security.txt every day, so researchers and authorities can reach the right person.

Drills

Run a practice incident against the clocks, so the first real one is not the first time your team sees them.

What it is not

We keep the time. You make the call.

SkyQon never submits a report on your behalf and does not decide whether an incident must be reported. Those decisions stay with you and your advisers. The readiness report scores your preparation; it is not a certificate.

The software works alongside our CRA 24-Hour Reporting Kit: the kit is the written procedure, the software keeps the clocks and the record.

Know your deadlines before you need them.

Incident Reporting is an add-on, and it is included in the NIS2 Evidence Pack and in Enterprise.