Spain ENS Art. 33: Notify significant incidents to CCN-CERT (public bodies) or INCIBE-CERT (private providers)

What does Art. 33 require?

Articles 25, 33 and 34: entities keep incident management procedures with detection, classification, analysis, resolution, communication and records; public sector entities notify the CCN significant incidents under the incident notification technical instruction (without prejudice to NIS rules); private sector providers to public bodies notify incidents affecting them to INCIBE-CERT, which coordinates with CCN-CERT; after an incident the CCN-CERT determines reconnection risk and the Secretaría General de Administración Digital authorises reconnection to shared services.