# What has to be in a NIS2 early warning?

Under Article 23(4)(a), the early warning indicates, where applicable, whether the significant incident is suspected of being caused by unlawful or malicious acts and whether it could have a cross-border impact. The details follow in the 72-hour notification.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/what-has-to-be-in-a-nis2-early-warning

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [Is the final report due one month after the incident?](https://netsenx.com/en/faq/is-the-final-report-due-one-month-after-the-incident)
- [Are the deadlines different for trust service providers?](https://netsenx.com/en/faq/are-the-deadlines-different-for-trust-service-providers)
- [How fast must a data breach be reported under the GDPR?](https://netsenx.com/en/faq/how-fast-must-a-gdpr-breach-be-reported)
- [What does the CRA require when a vulnerability is exploited?](https://netsenx.com/en/faq/what-does-the-cra-require-when-a-vulnerability-is-exploited)
- [Does DORA apply to us?](https://netsenx.com/en/faq/does-dora-apply-to-us)