ENISA's current guidance
ENISA says mandatory notifications still need to be submitted through the Single Reporting Platform. If the SRP is temporarily unavailable, manufacturers should wait until it becomes available again and then submit the required notification through the platform.
What if immediate communication is necessary?
ENISA states that manufacturers may contact their designated CSIRT directly if they consider immediate communication necessary before the SRP is restored. However, the notification must still be submitted through the SRP once it becomes available again.
Operational preparation
Your incident runbook should preserve the awareness timestamp, deadline calculations, attempted submission history and the review-ready report pack even if the regulatory platform is unavailable. CyberAct24's role is preparation and evidence organisation, not replacing the official platform.
Official guidance: ENISA SRP FAQ — temporary unavailability · ENISA SRP status