How are you drawing the line on NIS2 incident reporting?
I’m trying to turn NIS2’s open-ended language into something our team can apply consistently. How should we judge whether an incident is significant, what counts as state-of-the-art, and…
I’m trying to turn NIS2’s open-ended language into something our team can apply consistently. How should we judge whether an incident is significant, what counts as state-of-the-art, and…