CERT-Bund
CERT-Bund is the CSIRT within the German Federal Office for Information Security. Since 11 September 2026 it has received German manufacturers' notifications via the ENISA platform, and it is also the point of contact if the platform is ever unavailable.
CERT-Bund is the German federal computer emergency response team within the BSI. For manufacturers with their main establishment in Germany, it is the CSIRT designated as coordinator that receives notifications under Article 14 of the Cyber Resilience Act.
Definition in the Regulation
The Regulation does not define the term; CERT-Bund is a German body. In Article 14(7), Regulation (EU) 2024/2847 refers only to the CSIRT of the Member State of the main establishment. ENISA's list (as of 10 September 2026) shows which body that is in Germany: CERT-Bund. The BSI also names CERT-Bund as the coordinating CSIRT on its page about the reporting platform. The national legal basis is to be created by the German CRA implementation act (CRA-Durchführungsgesetz; section 5(3), point 6 of the draft BSI Act, BSIG-E, Bundestag printed paper 21/6134); as of 7 October 2026 the draft had not been promulgated.
What it means for manufacturers
When registering on the reporting platform, a German manufacturer selects Germany and therefore CERT-Bund as coordinator. CERT-Bund verifies that the reporting person belongs to the manufacturer; how long this takes has not been published. The notification itself must be written in English. According to the BSI, if the platform is down, CERT-Bund will accept the notification by e-mail as an exception. CERT-Bund also mediates between security researchers and manufacturers when coordinated disclosure stalls. BSI TR-03183-3 recommends informing the national CSIRT without delay of an actively exploited vulnerability and coordinating the measures with it. Neither the BSI nor ENISA mentions any way to test or practise notifications.
Free templatesCRA Reporting KitReporting playbook, awareness record, notification templates for the ENISA platform, call chain and deadline calculator. Six Word templates, two Excel workbooks and a handbook, free by e-mail.Request the kit