Assisting Manufacturers in Complying with the Mandatory Vulnerability and Incident Reporting Obligations Taking Effect on 11 September 2026

The EU Cyber Resilience Act (CRA) – officially Regulation (EU) 2024/2847 – is the first horizontal cybersecurity regulation in the EU covering all products with digital elements. It elevates cybersecurity requirements from voluntary recommendations to mandatory legal obligations, encompassing hardware products, software applications, and associated remote data processing services. The CRA requires manufacturers to embed “security by design” principles from the product development stage and to assume cybersecurity responsibility throughout the entire product lifecycle.

Key Implementation Timeline

The CRA entered into force on 10 December 2024, with obligations phased in as follows:

Date	Key milestones	Urgency level
11 September 2026	Mandatory reporting obligation under Article 14 takes effect – manufacturers must begin reporting actively exploited vulnerabilities and serious security incidents
11 December 2027	Full CRA application – all products with digital elements must comply with cybersecurity requirements before being placed on the EU market

Important note: The September 2026 reporting obligation applies to existing products still within their support period, including legacy products already on the EU market.

Article 14: The Most Stringent Compliance Challenge

Article 14 of the CRA requires manufacturers to report:

• Actively exploited vulnerabilities – where there is evidence of actual attacks or proof‑of‑concept (PoC) in circulation
• Serious security incidents – e.g., malicious code injection, large‑scale data breaches, or widespread device disruption

The reporting deadlines are extremely tight:

Timeframe	Requirement
Within 24 hours	Early warning notification (to the national CSIRT and ENISA)
Within 72 hours	Detailed incident report (impact, scope, mitigation measures)
Within 14 days / 1 month	Final report (after remediation completion or incident closure)

For globally distributed teams, time‑zone differences, incidents occurring over weekends, and multilingual reporting requirements create significant operational pressure.

Consequences of Non‑Compliance

Failure to meet CRA requirements carries severe penalties:

• Fines: Up to 2.5% of global annual turnover or €15 million, whichever is higher
• Market enforcement measures: Product bans, mandatory recalls, withdrawal from the EU market
• Other consequences: Disgorgement of ill‑gotten gains, market access restrictions, and consumer class‑action lawsuits

CMA Testing: End‑to‑End Automated Solution for Article 14 Compliance

CMA Testing now offers a cloud‑based automated vulnerability reporting service that meets regulatory requirements and is specifically designed to address the operational and technical challenges of Article 14:

• Automated SBOM generation and management: Automatically generates or imports Software Bill of Materials (SBOM), with real‑time integration with global vulnerability databases to deliver comprehensive impact analysis within 10 minutes
• VEX intelligent filtering: Integrates Vulnerability Exploitability Exchange (VEX) mechanisms to automatically filter out over 60% of false positives, significantly reducing reporting workload while maintaining compliance accuracy
• AI‑driven reporting automation: Built‑in AI compliance assistant automatically generates ENISA‑compliant English reports (early warning, detailed report, final report) – with one‑click human confirmation before direct submission to the ENISA platform, ensuring reliable adherence to the 24‑hour / 72‑hour reporting deadlines
• End‑to‑end visibility and coordinated disclosure: Real‑time dashboards display compliance deadlines and reporting status; integrated Coordinated Vulnerability Disclosure (CVD) portal unifies internal and external reporting channels
• Audit‑ready compliance and 24/7 monitoring: Full activity logging ensures regulatory traceability; automated compliance record archiving; 24/7 monitoring and alerting ensure zero reporting gaps

Act Now

CRA Article 14 is a zero‑transition, zero‑exemption requirement. All digital products already on the EU market must have a compliant reporting mechanism in place by 11 September 2026.

Leveraging its deep expertise in compliance and certification, CMA Testing is committed to helping manufacturers address CRA compliance challenges in an efficient, accurate, and scalable manner.

Contact us:

Hong Kong:

• Tel: (852) -26988198
• Email: info@cmatesting.org

Shenzhen:

• Tel: (86) 0755-88350808
• Email: info.sc@cmatesting.org

Shanghai:

• Tel: (86) 021-64330500
• Email: info.sh@cmatesting.org

Dragon boats are racing, drums are beating, and the scent of zongzi fills the air – it’s time to celebrate the Dragon Boat Festival! 

At CMA Testing, we believe that every festive bite should bring joy, not worry. That’s why our commitment goes beyond the food itself – we also test food-grade packaging materials to ensure safety from the package to the palate. Whether it’s pesticide residues, heavy metals, microbiological contaminants, or packaging compliance, our comprehensive testing services protect every step of the supply chain.

Because true safety means safeguarding both what you eat and what touches it. Wishing you a delicious, joyful, and worry-free Dragon Boat Festival!

Following the government’s newly announced “Pet-Friendly Dining Scheme,” CMA Testing is proud to launch the “A+ Pet Friendly Premises Evaluation Programme” – an authoritative certification that ensures a safe, hygienic, and welcoming environment for both pets and their owners.

Why join?

• Boost foot traffic and business opportunities
• Simple & fast application
• Expand your business network
• Enhance brand image
• Improve operational management

Limited-Time Offer
The first 100 licensed F&B outlets can obtain the “A+ Pet Friendly Certificate” (worth HK$8,000) completely FREE – subject to meeting CMA Testing’s assessment criteria.

Hurry – slots are limited! Secure your certification today and stand out in the growing pet-friendly economy.

Contact
Joey Kwok
WhatsApp：https://wa.link/s3sgi5
WeChat: JKwok_DC5
Tel: +852 2690 8255
Email:  joeykwok@cmatesting.org

• This offer is valid for the Pet-Friendly Premises Scheme provided by the Chinese Manufacturers’ Association Industrial Development Fundation Limited.
• This offer is only valid in Hong Kong.
• This offer is valid for one-time use only and applies to the first phase (June 12, 2026) of the 1,000 restaurants that successfully applied for the Food and Environmental Hygiene Department’s “Allowing Dogs to Enter Approved Restaurants” certification. It cannot be combined with other promotions, offers, or special offer packages.
• The Chinese Manufacturers’ Association Industrial Development Fundation Limited (Hong Kong) reserves the right to amend these terms and conditions without prior notice. In case of any dispute, the final decision of the Chinese Manufacturers’ Association Industrial Development Fundation Limited (Hong Kong) shall prevail.

CMA Testing was recently invited to the 2026 National Low-Carbon Day Guangdong Provincial Main Event, where we joined China Quality Certification Centre as a co-presenter of certificates to companies awarded the Guangdong-Hong Kong Carbon Footprint Mutual Recognition. Our Chief Operations Officer, Mr. Kent Yau, attended the ceremony to witness the collaborative carbon-reduction achievements across the regions.

As an independent professional testing and certification body, CMA Testing offers a comprehensive suite of environmental and sustainability services, including:

• Carbon Management: ISO 14064-1 (Organizational GHG Inventory), ISO 14064-3 (Validation & Verification), ISO 14067 (Product Carbon Footprint)
• Local Carbon Audits and Energy Audits
• ESG Performance Certification and Customised Solutions
• Green Finance and Sustainability Assurance (ISAE 3000 + ISSA 5000)

Whether you are preparing for carbon inventory or seeking ESG consultancy, CMA Testing can tailor solutions to elevate your environmental performance and achieve sustainability goals.

 Contact us today:

 Tel: +852 9633 2337

 Email: candywong@cmatesting.org

 WhatsApp: https://wa.link/lyarqx

According to the Hong Kong Buildings Department’s Practice Note 85, protective materials (such as safety nets, protective sheeting, etc.) installed on building scaffolding for construction works must have flame retardant performance that complies with recognized standards. Registered contractors are required to take samples as specified and submit them to a laboratory that is designated by the government and accredited by the Hong Kong Laboratory Accreditation Scheme (HOKLAS) or a mutually recognized body.

CMA Testing’s Accredited Testing Capabilities:
· GB 5725-2009 Clause 5.2.2.9 – Flame retardant performance of safety nets (test method: GB/T 5455)
· GB 5725-2009 Clause 5.1.12 – Flame retardant performance of safety nets (test method: GB/T 5455)
· GB 5725-2025 Clauses 5.5.2 & 5.5.3 – Flame retardant performance of safety nets (test method: GB/T 5455)
· BS 5867-2:2008 (Type B performance requirements) – Flame retardant performance test for curtains and drapery fabrics

Ensuring test results comply with relevant standards and regulatory requirements.

All protective nets, protective sheets, tarpaulins, or plastic sheets installed to cover external walls shall have appropriate flame retardant characteristics and meet recognized standards.

Applicable Product Categories
· Construction dust protection safety nets (close-mesh type)
· Load-bearing safety nets (horizontal nets / vertical nets)
· Tarpaulins and canvas fabrics

CMA Testing provides a full range of testing services to help you ensure product safety and compliance from the source.

Contact us: 2698 8198
WhatsApp: https://wa.link/uqvhgn
Email: evakung@cmatesting.org

On May 7, 2026, the Hong Kong Food and Environmental Hygiene Department (FEHD) officially announced a highly anticipated policy adjustment—starting May 18, restaurants can apply to allow dogs to enter, with implementation expected in July this year. This announcement marks a historic shift from Hong Kong’s over 30-year-old “dog ban” on restaurants. For many pet lovers and the catering industry, this presents both an opportunity and a new management challenge.

As a third-party testing and certification organization, CMA Testing is launching the “Pet-Friendly Venue Evaluation Scheme” to help venues achieve harmonious coexistence between humans and pets using professional standards. The following is a summary of the policy details and professional solutions.

How to Apply

Restaurants wishing to allow dogs to enter must submit their applications electronically through the Hong Kong FEHD’s dedicated website between May 18 and June 8, 2026. The initial quota is capped at 1,000; if applications exceed the quota, the Food and Environmental Hygiene Department will allocate quotas by lottery. Upon approval, the licensee must pay HK$140 to complete the license amendment.

Eligibility Requirements and Application Qualifications

Not all Hong Kong restaurants are eligible to apply. Applicants must meet the following basic requirements:

Hold a valid official license: This is the most basic entry threshold.

Operating area greater than 20 square meters: To ensure spatial comfort and safety for both people and dogs.

The following types of restaurants are not currently accepting applications: hot pot restaurants and barbecue restaurants (including teppanyaki, Korean barbecue, etc.). The main consideration is that these operations involve open flames and high temperatures, which may pose a safety hazard to dogs. Furthermore, approved restaurants are prohibited from cooking or heating food at any seating area at any time.

Implementation Timeline

To assist the industry in a smooth transition, the Food and Environmental Hygiene Department (FEHD) has established a clear timeline:

May 11, 12, 13, and 28: Four briefing sessions (simultaneously online and offline) have been held to introduce the regulatory requirements and application process.

Mid-June: Announcement of the first batch of approved restaurants.

Within July: Officially taking effect on a designated date (the specific date is subject to official announcement). Before this effective date, only guide dogs and working dogs are allowed in restaurants.

It is worth noting that if an approved restaurant violates regulations three times within one year, its permit will be revoked, and it will be prohibited from reapplying for one year. However, this will not affect its existing restaurant license. This mechanism aims to encourage operators to continue to assume management responsibility.

Operating Rules and Compliance Requirements

In addition to the application qualifications, restaurants must also comply with a set of specific operating regulations:

Leash Control: Dogs entering restaurants must be securely leashed by an adult at all times using a leash no longer than 1.5 meters, or tied to a fixed attachment.

Dog Category Restrictions: “Fighting dogs” or “known dangerous dogs” (such as Pit Bull Terriers, Argentine Dogos, etc.) are prohibited.

Food Safety Requirements: Cooking or preparing dog food is prohibited in restaurants. Only pre-packaged dry dog ​​food and canned food may be provided or sold. Dogs are not allowed on the dining table. Dogs are not permitted to use reusable tableware in the restaurant.

These regulations serve as a safety measure for both dog owners and restaurant operators: operators who knowingly fail to prevent customers from violating these regulations may also face legal liability.

CMA Testing: Safeguarding “Pet-Friendly” Practices with Professional Standards

The policy opening means the catering industry is entering a new consumption scenario, but “allowing entry” does not equate to “truly pet-friendly.” True pet-friendliness requires answering a series of professional questions:

• Where do pets enter from? Which areas are they allowed to stay in?
• How is excrement disposed of? How is cross-contamination prevented?
• How are conflicts or low-probability events between pets handled promptly?

The answers to these questions form the core of CMA Testing’s “Pet-Friendly Venue Evaluation Program.” This program, based on international and industry standards, conducts authoritative evaluations of venues’ environmental safety, hygiene management, and pet-friendliness through professional audits. The evaluation covers multiple professional dimensions, including:

• Zoning and Safety Standards: Clearly delineating pet activity areas from non-pet areas to ensure a positive experience for all customers;
• Hygiene and Cross-Contamination Control: Standardizing cleaning and disinfection processes, ensuring separate handling of human and pet food utensils to eliminate hygiene hazards;
• Emergency Response Mechanisms: Whether the venue has established emergency plans for pet fights, accidental injuries, or bites;
• Document Records and Traceability: Maintaining cleaning records, training attendance sheets, and customer complaint data for continuous management optimization.

CMA Testing is now systematically applying internationally recognized service evaluation methodologies to the emerging consumer scenario of “pet-friendly.” We aim to build an inclusive ecosystem where pet-friendly families can patronize with peace of mind and where the general public can widely trust us, thereby enhancing the consumer experience and brand value, and promoting a higher level of harmony and civilization in cities.

Source:

Related press release from the Hong Kong Food and Environmental Hygiene Department

On May 31, the day before International Children’s Day, the second HKU Shanghai Alumni Association Children’s Day Charity Carnival warmed hearts at Shanghai Qiantan Taikoo Li. As one of the sponsors, CMA Testing & CMA+ had the privilege of participating in this charity event themed “Childlike Hearts Together, Growing as One,” joining many caring organizations, charity groups, alumni families, and volunteers in creating memories filled with love and companionship.

A Heartfelt Setup

Early that day, our team arrived on site to lovingly set up our small charity booth. In addition to Dr.A+ series souvenirs, we specially featured brand-new fragrance products from the “Hope Tree” brand — with their fresh scents and warm packaging, they seemed to whisper our understanding of charity: charity doesn’t have to be grand; it can be a tangible gesture, a comforting fragrance.

When Charity Becomes Tangible and Experiential

The event featured charity exhibitions, a charity bazaar, children’s creative DIY activities, gourmet experiences, live music performances — every segment transformed charity from an abstract concept into concrete action. At that moment, charity was no longer a distant call, but a warmth held in the palm, a smile upon the face.

CMA Testing & CMA+ has always believed that a company’s value lies not only in providing professional services but also in the warmth of giving back to the community. Our sincere thanks to the HKU Shanghai Alumni Association for their thoughtful organization, to the “Hope Tree” brand for their enthusiastic response, and to every child and adult who stopped by our booth. We look forward to seeing you again soon~

On the event day, St. Stephen’s College was transformed into a vibrant green marketplace. Student teams designed and decorated four interactive booths, simulating real retail store environments to promote and sell green, ESG-focused products — such as formaldehyde-removing products from Full of Hope, which were very well received. All transactions were completed instantly using “Carbon Points” — created by Green Matter Hub’s innovative platform and verified by third-party laboratory CMA Testing. 🎉

🌱 CMA Testing’s role: Third-party verification of carbon points + hands-on workshops + training student teams to run their booths

🎪 Event highlights:
Over 300 students and teachers participated, with four student-led booths allowing everyone to redeem various green products using Carbon Points
Diverse workshops spanning tech, wellness, entrepreneurship, and music: running, yoga, tea appreciation, startup sharing, art-tech… Students learned while having fun, enriching their after-school lives!
From booth setup and product presentation to carbon point management, students sharpened practical skills including communication, teamwork, creativity, and event planning

🏆 Through this initiative, St. Stephen’s College continues to create authentic learning opportunities that connect students with social enterprises, making education both interesting and meaningful!
Carbon points don’t just cut emissions — they build a stage for tomorrow’s leaders to dream and do 💚