Introduction
The operators have to notify their National Regulatory Authority (NRA) in case of incident having a significant impact on essential services and affecting networks or information systems. The notification happens in at least two steps:
The operator has to fill a preliminary notification within 24 hours after having discovered the incident.
The operator then needs to fill a complete notification after maximum 15 days of the preliminary notification. Or, in case the incident would be insignificant, to notify it to the ILR within the same timeframe.
If after the final notification new important information is discovered by the operator, he has to submit an additional notification during 2 months of the final notification. An additional notification is basically an update of the final notification.