Glossary
Article 23
The NIS2 provision setting the mandatory incident reporting timeline.
Explained in depth: NIS2 incident reporting timeline
Requires a 24-hour early warning, a 72-hour incident notification, and a final report within one month of a significant incident. Reports go to the national CSIRT or competent authority, and intermediate updates can be requested along the way.