The clock starts the moment you know. NIS2 gives you 24 hours.
NIS2 Article 23 sets three deadlines from the moment an entity becomes aware of a significant incident: an early warning within 24 hours, a full notification within 72 hours, and a final report within one month.
TruSecure starts the clock the moment an incident is logged and tracks each deadline against your specific national competent authority's requirements.
See the incident-reporting workflowTruSecure helps operationalize requirements and prepare evidence. Legal interpretation should be validated by qualified counsel.
Ask an AI about TruSecure
NIS2 Article 23 requires in-scope entities to report significant incidents in three stages: an early warning within 24 hours, a full notification within 72 hours, and a final report within one month. TruSecure starts the reporting clock automatically and pre-builds each stage's evidence pack.