Recital 74 Voluntary notification of vulnerabilities and incidents

Manufacturersmeans a natural or legal person who develops or manufactures products with digital elements or has products with digital elements designed, developed or manufactured, and markets them under its name or trademark, whether for payment, monetisation or free of charge; and other natural and legal persons should be able to notify to a CSIRT designated as coordinatormeans a CSIRT designated as coordinator pursuant to Article 12(1) of Directive (EU) 2022/2555. or ENISA, on a voluntary basis, any vulnerabilitymeans a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat; contained in a product with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately;, cyber threatsmeans a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881; that could affect the risk profile of a product with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately;, any incident having an impact on the security of the product with digital elementsmeans an incident that negatively affects or is capable of negatively affecting the ability of a product with digital elements to protect the availability, authenticity, integrity or confidentiality of data or functions; as well as near misses that could have resulted in such an incidentmeans an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555;.