Platform · Incidents and notifications

NIS2 art. 23: early warning within 24 hours, notification within 72, final report within one month.

NIS2 art. 23 sets three communications for significant incidents: an early warning within 24 hours of becoming aware, a notification within 72 hours, and a final report within one month of the notification. For financial entities, DORA (art. 17-19) governs the management, classification and reporting of ICT incidents. EVIDEVO records the time of discovery, guides classification, calculates the deadlines and prepares draft communications. Every step stays on record with author and time.

Let's talk Starting assessment

Data for illustrative purposes only, not real

The problem

01

Tight timelines

24 hours for the early warning, while the facts are still unclear.

02

Undefined responsibilities

It is unclear who decides whether the incident is significant and who signs the notification.

03

Rebuilding afterwards

After the incident, timeline and decisions have to be pieced together from memory for the final report.

What it does

Incident classification and NIS2 notification deadlines: 24 hours, 72 hours, one month.

  • NIS2 deadline calculation

    24-hour and 72-hour deadlines calculated from discovery; the one-month deadline calculated from the notification.

  • Guided classification

    Significance criteria to decide whether the incident must be notified and with what information.

  • Draft communications

    Drafts of the early warning, notification and final report, filled in with the data already gathered.

  • Roles and approvals

    Who assesses, who approves, who sends: every step is recorded.

  • Incident timeline

    Events, decisions and actions recorded in chronological order during handling.

  • Corrective actions

    Corrective actions from the analysis are linked to the controls involved.

The outcome

  • Early warning, notification and final report deadlines calculated for each incident
  • A timeline with events, decisions, authors and times
  • The communications sent, with who approved them and when

Related frameworks

Other capabilities

A thirty-minute presentation based on the organisation's scope.

It starts from the frameworks in scope and how the work is organised today. In thirty minutes, EVIDEVO is shown working in that context.

Let's talk