What are the NIS2 incident reporting deadlines?
Under Article 23(4): an early warning within 24 hours of becoming aware of a significant incident, an incident notification within 72 hours, an intermediate report if the authority asks for one, and a final report no later than one month after the notification. National laws transposing NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. can add detail, so check your own country's rules.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
This answer also appears, with more context, here: NIS2 network monitoring
Read next
Related questions
Terms used here
- NIS2 (the EU's second Network and Information Security directive)
- The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies.