{"object_type":"business_agent","schema_version":1,"id":"agent:eu:business:nis2-incident-reporting","question":"What must we report under NIS2 after a cyber incident?","affected_business":["Essential or important entity"],"decision":"Yes, significant incidents must be reported to the CSIRT or competent authority.","obligation":"Submit an early warning, an incident notification and a final report; management bodies approve and oversee risk measures.","risk":{"risk_level":"high","risk_factors":["fine_cap_pct_turnover"]},"action":["Classify the incident as significant or not","Send the early warning","Send the incident notification","Submit the final report"],"deadline":"Early warning within 24 hours, notification within 72 hours, final report within one month of the notification.","verification":{"sha256":"1b4d1eb5ef0ef54dd26cfcd1ae47d1ca1e5fb964ee1609ca53cc2d821f660536","read_at":"2026-10-15","sources":["https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555","https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555"],"source":"Source: NovaCopilot"},"related":[{"id":"eu:nis2","type":"action_kit","url":"https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:nis2"},{"id":"agent:eu:business:cra-vulnerability-reporting","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:cra-vulnerability-reporting"}],"next_questions":["Must a manufacturer report exploited vulnerabilities in its products?"],"version":"1b4d1eb5ef0ef54d","updated_at":"2026-10-15","first_published":"2026-10-14","changes_url":"https://legal.exploreworldai.com/api/public/v1/business-agent-changes","source":"NovaCopilot","versions":{"model":"1.0","agent_version":"3254c7afa4a5a739","risk_version":"a5ce36e019b9029b","decision_version":"bf186158b28ab85c","package_version":"e1b16760d2bc919a","change_score":0.25,"changed_dimensions":["package"],"changed_at":"2026-10-15","verified_at":"2026-10-15","next_check":"2026-10-22","is_current":true,"supersedes":[{"dimension":"package","version":"1d62bb5ea6ffd73f","until":"2026-10-15"}],"verify_url":"https://legal.exploreworldai.com/api/public/v1/versions/verify?id=agent%3Aeu%3Abusiness%3Anis2-incident-reporting","changes_url":"https://legal.exploreworldai.com/api/public/v1/living-versions","note":"change_score measures freshness only, never ranking.","impact":"not_in_register"},"_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/business-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"decision","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T10:01:08.638Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent%3Aeu%3Abusiness%3Anis2-incident-reporting&view=compact","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":830}}