Art. 5 Significant incidents with regard to DNS service providers | Cybersecurity measures and significant incidents for relevant entities | NIS 2

With regard to DNS service providers means an entity that provides: publicly available recursive domain name resolution services for internet end-users; or authoritative domain name resolution services for third-party use, with the exception of root name servers;, an incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; shall be considered significant under Article 3(1)(g), where it fulfils one or more of the following criteria:

a recursive or authoritative domain name resolution service is completely unavailable for more than 30 minutes;
for a period of more than one hour, the average response time of a recursive or authoritative domain name resolution service to DNS requests is more than 10 seconds;
the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of the authoritative domain name resolution service is compromised, except in cases where the data of fewer than 1000 domain names managed by the DNS service provider means an entity that provides: publicly available recursive domain name resolution services for internet end-users; or authoritative domain name resolution services for third-party use, with the exception of root name servers;, amounting to no more than 1 % of the domain names managed by the DNS service provider means an entity that provides: publicly available recursive domain name resolution services for internet end-users; or authoritative domain name resolution services for third-party use, with the exception of root name servers;, are not correct because of misconfiguration.