Rehearse with a reporting drill

A reporting exercise opens a case for a fictitious exploited vulnerability in one of your own components and starts the real 24-hour clock, with the reminders and the drafts. Your team practises the whole sequence before the day it counts. Drills are part of the paid plans.

1. Under Reporting, click Start an exercise now, or schedule a surprise exercise sometime in the next days you choose. It then starts on a weekday during working hours; nobody can see the exact moment, not even in Provetry.
2. The alert addresses receive the reminders, marked as an exercise.
3. Work through the case as you would for real: answers, drafts, Mark as submitted. The case says it: do not submit anything to ENISA.
4. Read how the exercise went: the time from the start to each step marked as submitted, against the Article 14 deadline, and the fields still empty for ENISA’s platform.

Exercise cases are clearly marked and never sent to the expert reviewer. They are recorded in the evidence journal: holding regular drills is part of the diligence you can show.