# When does the NIS2 24-hour clock start?

When the entity becomes aware of the significant incident, not when the incident began. Article 23(4) counts both the early warning (24 hours) and the incident notification (72 hours) from that moment.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/when-does-the-nis2-24-hour-clock-start

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [What has to be in a NIS2 early warning?](https://netsenx.com/en/faq/what-has-to-be-in-a-nis2-early-warning)
- [Is the final report due one month after the incident?](https://netsenx.com/en/faq/is-the-final-report-due-one-month-after-the-incident)
- [Are the deadlines different for trust service providers?](https://netsenx.com/en/faq/are-the-deadlines-different-for-trust-service-providers)
- [How fast must a data breach be reported under the GDPR?](https://netsenx.com/en/faq/how-fast-must-a-gdpr-breach-be-reported)
- [What does the CRA require when a vulnerability is exploited?](https://netsenx.com/en/faq/what-does-the-cra-require-when-a-vulnerability-is-exploited)