Tools · Incident routing

What might you need to notify?

Toggle the facts of the situation. Parallel clocks often run together — especially NIS2 and GDPR. Not a filing tool.

Educational triage — not a notification filing tool. Thresholds, formats and national portals differ. Always verify with your competent authority and official texts.

Situation

Are you (likely) a NIS2 essential or important entity? Does the incident involve personal data? Are you a financial entity under DORA? DORA reporting typically displaces NIS2 incident reporting for what DORA covers. Are you a manufacturer of a product with digital elements (CRA)? Have you been identified as a CER critical entity? Are you a trust-service or EUDI wallet provider?

Optionally pick a Member State for NIS2 authority / CSIRT context.

Clocks that may apply

Toggle at least one fact to see clocks.

Looking ahead

PROPOSAL Digital Omnibus Single Entry Point (PROPOSAL)

If adopted, one ENISA-operated submission could be routed to multiple authorities. Legal tests and regime-specific deadlines stay separate. Expected live ~18–24 months after adoption.