EU Login
Before anyone can even see a form on ENISA's reporting platform, they need an EU Login account with a second factor. The account is personal, can be set up in advance and should exist for at least two people in the company.
EU Login is the central authentication service of the institutions of the European Union. A personal EU Login account with multi-factor authentication enabled is a prerequisite for the single reporting platform.
Definition in the Regulation
The Regulation does not define the term. In Article 16, Regulation (EU) 2024/2847 only provides that ENISA establishes and maintains the reporting platform. ENISA decides which sign-in the platform requires: according to its FAQ on the platform, an EU Login account with multi-factor authentication is mandatory. The account can be created in advance at ecas.ec.europa.eu. For the second factor, ENISA refers generally to multi-factor methods; a practitioner's report from Belgium also mentions passkeys, which ENISA's FAQ does not expressly name.
What it means for manufacturers
EU Login accounts are personal; first name, surname and e-mail address are taken from the account when registering on the platform and cannot be changed there. A shared functional account used by several colleagues is therefore not an option. To cover holidays and sickness, each person who reports needs their own account and their own Assigned Representative role. It makes sense to create accounts for at least two people today, set up the second factor and test the sign-in once, so that the 24-hour deadline is not missed in an emergency because of a forgotten authenticator app.
Free templatesCRA Reporting KitReporting playbook, awareness record, notification templates for the ENISA platform, call chain and deadline calculator. Six Word templates, two Excel workbooks and a handbook, free by e-mail.Request the kit