Glossary · NIS2
CSIRT
Computer Security Incident Response Team — the national body organisations report significant incidents to under NIS2.
Explained in depth: NIS2 incident reporting timeline
Every EU member state must designate or establish one or more CSIRTs responsible for incident handling at national level. Under NIS2, the CSIRT (or, where a member state so decides, the competent authority) is the recipient of the three-stage incident reports under Article 23. CSIRTs also monitor threats, issue early warnings and alerts, and assist in-scope entities during incidents. CSIRTs cooperate across the EU through the CSIRTs Network, which supports information exchange during cross-border incidents. In Sweden, the national CSIRT function is CERT-SE, operated by MSB.
Why it matters
Your CSIRT is your operational counterpart during an incident, not just a mailbox for reports. Establishing contact and understanding the national reporting portal before an incident occurs saves critical time inside the 24-hour window.