Calculator voor NIS2-meldtermijnen

Early warning, incident notification and final report under § 32 BSIG with date and time. Free, no sign-up, your inputs are not stored.

1. When did you become aware of the significant incident?

Datum en tijd. Vanaf dit moment lopen de termijnen van 24 en 72 uur.

2. Time zone

Matters for the display and for the one-month deadline. The hour deadlines stay the same.

3. Optional: type of your entity

The deadlines are the same for everyone. Operators of critical facilities add details on the affected facility.

4. Optional: calculate the deadline for the final report

Incident notification (72-hour report) submitted on

The final report is due no later than one month after that (§ 32(1) no. 4 BSIG).

When is an incident significant?

Essential and important entities must report significant incidents. An incident is significant if it has caused or can cause severe operational disruption of the services or financial loss, or if it has affected or can affect other persons by causing considerable material or non-material damage (§ 2 no. 11 BSIG). For certain digital services, Implementing Regulation (EU) 2024/2690 sets out specific criteria. More in the guide to NIS2 reporting

Frequently asked questions about NIS2 reporting deadlines

Who has to report under NIS2?

Essential and important entities under § 28 BSIG. The free applicability check shows whether your company is one of them.

Wat betekent “onverwijld”?

The 24 and 72 hours are maximum periods. Report as early as you carefully can.

What applies if the incident is still ongoing after one month?

Then you submit a progress report at that point instead of the final report. The final report follows once the incident has been fully handled (§ 32(2) BSIG).

Waarom rekent de rekenhulp anders over de tijdomschakeling heen?

Een termijn van 24 uur eindigt na 24 echte uren. Valt de tijdomschakeling ertussen, dan staat de klok aan het einde een uur eerder of later dan aan het begin.

Worden mijn gegevens opgeslagen?

Nee. De berekening gebeurt alleen in het werkgeheugen en wordt niet opgeslagen of gelogd.

Do I also have to report under the CRA or the GDPR?

Possibly, with their own deadlines and to other bodies. For manufacturers of products with digital elements there is the free CRA reporting deadline calculator.

Test Complass met uw eigen gegevens

Maak uw proefaccount zelf aan, desgewenst met een voorbeeldproject per kader. Wilt u Complass liever eerst zien, vraag dan een demo aan.

Gratis uitproberen Demo aanvragen