Notification within 72 hours
Catalog reference
Send a notification to your CSIRT and your competent authority without delay or, if that is not possible, within 72 hours of learning about the significant incident. It holds, where applicable, an update of the early warning information, an initial assessment of the incident including its severity and effects, the indicators of compromise where available, and all information that lets the CSIRT and the competent authority determine any cross-border effects (art. 27(1)). A trust service provider notifies without delay or, if that is not possible, within 24 hours when the incident affects the provision of its trust service (art. 27(2)). Cyberbeveiligingsbesluit art. 25 says the notification goes to the reporting point that the Minister has set up for it (the meldpunt).
Narrative — how we satisfy this requirement
No narrative yet. Add one.
No KPIs linked yet.