ED
Decision 2023/010/R
When deemed necessary, a two-step
mechanism could be used: a report alerting about the information security
event or incident and the availability of additional data that would require
controlled and confidential distribution. This report should only alert
recipients of the urgency and the necessity for organisations and competent
authorities to establish further communication through secure means.
Therefore, the report should
consist of two parts: one limited to mostly public information and one
containing the sensitive data that should be restricted to the recipients who
need to know. Wherever possible, reports should be based on an agreed taxonomy.
[Applicable from 22 February
2026 – ED Decision 2023/010/R]
Loading collections...