Glossary
Significant Incident
An incident that has caused, or could cause, severe operational disruption, financial loss, or considerable damage to others.
Explained in depth: NIS2 incident reporting timeline
Not every security event triggers NIS2's reporting obligation — only incidents meeting this threshold under Article 23 must be reported within the 24/72-hour timeline. Note the phrase "capable of causing": a contained intrusion can still be reportable, and for some digital service types the Commission has set quantitative thresholds.