NIS2 › Level 2 › Implementing acts

Commission Implementing Regulation (EU) 2024/2690 of 17 October 2024

laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures and further specification of the cases in which an incident is considered to be significant with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers (Text with EEA relevance)

Full documentArticle 9 of 16 · 1 annex

In this act Article 9 of 16

Article 9 — Significant incidents with regard to content delivery network providers

Digital & dataLevel 2Implementing RegulationNIS2In forceOfficial source

With regard to content delivery network providers, an incident shall be considered significant under Article 3(1)(g) where it fulfils one or more of the following criteria:

9(a)

(a)a content delivery network is completely unavailable for more than 30 minutes;

Copy link

9(b)

(b)the availability of a content delivery network is limited for more than 5 % of the content delivery network’s users in the Union, or for more than 1 million of the content delivery network’s users in the Union, whichever number is smaller, for a duration of more than one hour;

Copy link

9(c)

(c)the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a content delivery network is compromised as a result of a suspectedly malicious action;

Copy link

9(d)

(d)the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a content delivery network is compromised with an impact on more than 5 % of that content delivery network’s users in the Union, or on more than 1 million of that content delivery network’s users in the Union, whichever number is smaller.

Copy link