ActLume

ActLume blog

Read-only auditor articles

CRA Article 14 guidance written for the read-only auditor workflow role.

Read-only auditor articles

3 available

  1. An orange thread loops through three separate green record tiles. How should a manufacturer maintain evidence across the stages of a CRA Article 14 report?

    Keep one evidence trail through CRA reporting

    CRA notifications develop across the 24-hour, 72-hour, and final stages, making a traceable record of additions and corrections essential.

    3 min read
  2. An orange notice reaches selected green recipient nodes within a square delivery map. How should a manufacturer choose channels and prove that a CRA user notice reached the intended audience?

    Prove delivery of a CRA user notice

    CRA user communication is risk-based: manufacturers inform impacted users and, where appropriate, all users without implying that every case requires indiscriminate public disclosure.

    3 min read
  3. An orange timestamp punch opens a bounded green interval on a straight evidence rail. What should a manufacturer record as the moment a corrective or mitigating measure becomes available for CRA reporting?

    Record when a CRA corrective measure is available

    For an actively exploited vulnerability, the CRA final report is due no later than 14 days after a corrective or mitigating measure becomes available.

    3 min read