Skip to the text
In this act Article 4 of 16

Article 4 — Recurring incidents

Digital & dataLevel 2Implementing RegulationNIS2In forceOfficial source

Incidents that individually are not considered a significant incident within the meaning of Article 3, shall be considered collectively as one significant incident where they meet all of the following criteria:

4(a)
(a)they have occurred at least twice within 6 months;
Copy link
4(b)
(b)they have the same apparent root cause;
Copy link
4(c)
(c)they collectively meet the criteria set out in Article 3(1)(a).
Copy link