Skip to the text
In this act Article 14 of 16

Article 14 — Significant incidents with regard to trust service providers

Digital & dataLevel 2Implementing RegulationNIS2In forceOfficial source

With regard to trust service providers, an incident shall be considered significant under Article 3(1)(g) where it fulfils one or more of the following criteria:

14(a)
(a)a trust service is completely unavailable for more than 20 minutes;
Copy link
14(b)
(b)a trust service is unavailable to users, or relying parties, for more than one hour calculated on a calendar week basis;
Copy link
14(c)
(c)more than 1 % of the users or relying parties in the Union, or more than 200 000 users or relying parties in the Union, whichever number is smaller, are impacted by limited availability of a trust service;
Copy link
14(d)
(d)physical access to an area where network and information systems are located and to which access is restricted to trusted personnel of the trust service provider, or the protection of such physical access, is compromised;
Copy link
14(e)
(e)the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a trust service is compromised with an impact on more than 0,1 % of users or relying parties, or more than 100 of users or relying parties, whichever number is smaller, of the trust service in the Union.
Copy link