What this means in practice
Translate the provision into accountable decisions and documented processes. The exact application depends on the entity, the relevant national law and any applicable sector-specific rules.
Implementation questions
- Set criteria for escalation
- Identify the competent authority or CSIRT route
- Rehearse collection of impact and timing facts
Evidence to organise
| Record | What to check |
|---|---|
| Incident classification criteria | Owner, currency, approval and follow-up actions |
| Notification contacts and decision log | Owner, currency, approval and follow-up actions |
| Exercise results and reporting records | Owner, currency, approval and follow-up actions |
These are planning prompts, not an exhaustive legal checklist or proof of compliance.
Official sources and context
Use these alongside the applicable national legislation and authority guidance. This page is general information and may not reflect every national measure or later amendment.