Translations:Critical Entities‘ Resilience Directive (CER)/74/en

A first notification is generally to be submitted no later than 24 hours after the entity becomes aware of a security incident. A detailed report is to follow (if applicable) no later than one month thereafter.