Art. 7 Significant incidents with regard to cloud computing service providers | Cybersecurity measures and significant incidents for relevant entities | NIS 2

With regard to cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations; providers, an incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; shall be considered significant under Article 3(1)(g) where it fulfils one or more of the following criteria:

a cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations; provided is completely unavailable for more than 30 minutes;
the availability of a cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations; of a provider is limited for more than 5 % of the cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations;’s users in the Union, or for more than 1 million of the cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations;’s users in the Union, whichever number is smaller, for a duration of more than one hour;
the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations; is compromised as a result of a suspectedly malicious action,
the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations; is compromised with an impact on more than 5 % of that cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations;’s users in the Union, or on more than 1 million of that cloud computing service means a digital service that enables on-demand administration and broad remote access to a scalable and elastic pool of shareable computing resources, including where such resources are distributed across several locations;’s users in the Union, whichever number is smaller.