NIS2 reaches essential and important entities in 18 sectors. It asks for risk management measures, incident reporting on fixed deadlines and accountable management. Reltime is designed to support the evidence side, so every step can be shown when the authority asks.
17 Oct 2024 · transposition deadline, check national law.
24 hours
Early warning
Tell the authority a significant incident is suspected, and whether it may be malicious or cross border.
72 hours
Incident notification
Update the early warning with a first assessment of severity, impact and indicators of compromise.
1 month
Final report
Describe the incident, its root cause, the measures applied and any cross border impact.
Summary of NIS2 Article 23. National transposition can add detail. Check the law in each member state where you operate.
- Who owned the incident?
- An identified person in a defined role is assigned, and every handover is signed with time.
- How was it classified?
- The classification and the rule version that applied are recorded with the decision.
- When did you know?
- A signed timeline runs from first signal to each notification, in order.
- Which measures were in place?
- Security measures and access to essential systems are logged as events, not reconstructed later.
- Events
- Security measures, incidents
- Proofs
- Incident owner, classification and every escalation signed with role and time
- Actions
- Access to essential systems
- Reports
- Incident notifications
Fines for essential entities reach 2% of global turnover or EUR 10m, whichever is higher, and management can be held personally liable. Reltime helps you meet the evidence requirements. It does not replace your legal assessment.
See NIS2 alongside the other regulations · Open the regulatory calendar