# Do I need NDR for NIS2?

NIS2 does not name NDR, but it does require you to detect and handle incidents and to report significant ones on a fixed timeline. Article 21 lists incident handling among the required risk-management measures; Article 23 sets an early warning within 24 hours, a notification within 72 hours and a final report within one month. Network monitoring is one practical way to detect incidents in time and keep the evidence those reports need, and NetSenX tracks the Article 23 deadlines for each incident. The duties sit with your organisation: no tool fulfils them on its own.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [NIS2 scope and duties](https://netsenx.com/en/faq/nis2) · https://netsenx.com/en/faq/do-i-need-ndr-for-nis2

## Read next

- https://netsenx.com/en/nis2-network-monitoring
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Does NIS2 require network monitoring?](https://netsenx.com/en/faq/does-nis2-require-network-monitoring)
- [What are the NIS2 incident reporting deadlines?](https://netsenx.com/en/faq/what-are-the-nis2-incident-reporting-deadlines)
- [Does NIS2 apply to mid-sized companies?](https://netsenx.com/en/faq/does-nis2-apply-to-mid-sized-companies)
- [Does NetSenX submit the NIS2 report for us?](https://netsenx.com/en/faq/does-netsenx-submit-the-nis2-report-for-us)
- [What are the NIS2 fines?](https://netsenx.com/en/faq/what-are-the-nis2-fines)