Notes from our security architects

NIS2 incident reporting: making the 24-hour early warning work in practice

A significant incident starts three clocks. The first one runs out in 24 hours, so the report has to be part of the playbook, not a separate task.