Introduction 

The operators have to notify their National Regulatory Authority (NRA) in case of incident having a significant impact on essential services and affecting networks or information systems. The notification happens in at least two steps:

  • The operator has to fill a preliminary notification within 24 hours after having discovered the incident.

  • The operator then needs to fill a complete notification after maximum 15 days of the preliminary notification. Or, in case the incident would be insignificant, to notify it to the ILR within the same timeframe.

  • If after the final notification new important information is discovered by the operator, he has to submit an additional notification during 2 months of the final notification. An additional notification is basically an update of the final notification.