When a network and information security incident occurs, the employee or unit responsible for security under Article 3(2) notifies the relevant sectoral computer security incident response team within the time limits in Articles 21(4) and (5) and 22 of the Cybersecurity Act. Notifications under this article and under Article 17(7) of the Act use the Annex 7 form, which asks within two hours for the notifier, organisation, contact person, date and time, incident type, description, cross-border and other critical service impact, affected and source systems, initial actions and public disclosure stance, and within five working days for the attack mechanism, actions taken, corrective needs and artefact analysis. Sectoral teams forward summarised quarterly statistics to the national CSIRT on the Annex 8 form. Notifications sent by email are protected against unauthorised access and classified under the TLP rules in Article 6(7).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.