Recital 33 Incident notification and reporting


A mechanism for the notification of certain incidentsmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law; should be established to allow the competent authorities to respond to incidentsmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law; rapidly and adequately and to have a comprehensive overview of the impact, nature, cause and possible consequences of incidentsmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law; with which the critical entitiesmeans a public or private entity which has been identified by a Member State in accordance with Article 6 as belonging to one of the categories set out in the third column of the table in the Annex; deal. Critical entitiesmeans a public or private entity which has been identified by a Member State in accordance with Article 6 as belonging to one of the categories set out in the third column of the table in the Annex; should notify, without undue delay, the competent authorities of incidentsmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law; that significantly disrupt or have the potential to significantly disrupt the provision of essential servicesmeans a service which is crucial for the maintenance of vital societal functions, economic activities, public health and safety, or the environment;. Unless operationally unable to do so, critical entitiesmeans a public or private entity which has been identified by a Member State in accordance with Article 6 as belonging to one of the categories set out in the third column of the table in the Annex; should submit an initial notification no later than 24 hours after becoming aware of an incidentmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law;. The initial notification should only include the information strictly necessary to make the competent authority aware of the incidentmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law; and allow the critical entitymeans a public or private entity which has been identified by a Member State in accordance with Article 6 as belonging to one of the categories set out in the third column of the table in the Annex; to seek assistance, if required. Such a notification should indicate, where possible, the presumed cause of the incidentmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law;. Member States should ensure that the requirement to submit that initial notification does not divert the critical entitymeans a public or private entity which has been identified by a Member State in accordance with Article 6 as belonging to one of the categories set out in the third column of the table in the Annex;’s resources from activities related to incidentmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law; handling, which should be prioritised. The initial notification should be followed, where relevant, by a detailed report no later than one month after the incidentmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law;. The detailed report should complement the initial notification and provide a more complete overview of the incidentmeans an event which has the potential to significantly disrupt, or that disrupts, the provision of an essential service, including when it affects the national systems that safeguard the rule of law;.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod