24h Dry Run · v1.0.2 · one product team
Rehearse the reporting handoff before an incident starts the clock.
A self-guided CRA tabletop exercise for software and connected-product teams. Work through one synthetic incident, identify missing owners and evidence, and leave with a prioritised action report.
30–45 minutes · 6 roles · 20 capability checks
One-time purchase for business customers. Price excludes applicable VAT; the final total is shown at checkout.
Illustrative output · fictional data
A report the team can act on
- 1. Validate submission access.
Confirm that primary and backup representatives can use the reporting route. - 2. Shorten early-warning approval.
Prepare a factual summary and agree who can approve it within the clock. - 3. Record the reporting decision.
Separate confirmed facts, assumptions and unresolved questions; identify who owns the decision.
An example of the generated output, not a customer result. Scores reflect the team's own answers.
Open the exercise
Download a self-contained HTML file, instructions and licence. The exercise runs in a modern desktop browser, including offline.
Work through the handoffs
Choose one product, identify six responsible roles and assess readiness at the 24-hour, 72-hour and final-report stages.
Keep the action report
Generate all 20 findings and an action plan with accountable roles, proposed preparation targets and evidence to close each gap. Export Markdown or JSON, or print to PDF. Save and reload the exercise locally.
Built for a practical team review
For engineering, product-security and operational compliance owners at businesses placing software or connected products on the EU market. Use it with one internal product team before an incident, after a process change or during a readiness review.
The included scenario concerns active exploitation of a component in a connected product. Teams still make their own scope, reportability and evidence decisions. This is a preparation aid, not certification, legal advice or a managed incident-response service.
What your purchase includes
- Versioned, self-contained exercise file
- Product setup and six-role ownership map
- 20 readiness checks across three stages
- Full assessment, accountable roles and evidence to close gaps
- Local save/load and report export
- Instructions and licence for one internal product team
Before you buy
How does this differ from the free compiler?
The free compiler prepares fields for a working reporting packet. The paid exercise helps your team rehearse ownership and evidence handoffs, then produces a scored readiness and action report.
How do I receive it?
After payment verification, the checkout browser opens your download page. A private access link is also emailed to the checkout address. If the page fails to open, use the email or My downloads to recover access.
Does it submit anything to ENISA?
No. It uses synthetic exercise prompts and prepares internal working material. Official submission remains with the manufacturer through the official reporting platform.
Can I use it for several clients?
The €79 licence covers one internal product team at the purchasing organisation. It does not include resale, public redistribution or use across client organisations.
Does it upload exercise answers?
The downloaded exercise runs locally. Your input stays in that browser tab unless you save or share a file yourself.
What if a file does not work?
Contact info@peak-cs.com. Delivery problems or defective files will be replaced or refunded. Refund requests may be sent within 14 days; the published terms apply.
One review. A clearer next action.
24h Dry Run · €79 excluding VAT · one-time purchase