Translations:Network and Information Security Directive (NIS2-RL)/104/en

• **Within 24 hours**: Early warning to the national authority, including whether criminal activity or cross-border effects are suspected.
• **Within 72 hours**: A more detailed report including current information, impact assessment, and indicators of compromise.
• **Within one month**: A final report with a comprehensive incident description, classification, severity, impact, remediation actions, and cross-border implications.

Voluntary reporting of incidents, threats, and near misses to CSIRT is also possible—even for non-essential entities. Such reports may be submitted anonymously.