Erwägungsgrund 30

With a view to establishing whether an incident is significant, where relevant, relevant entities should count the number of users impacted by the incident. Where a relevant entity is unable to calculate the number of impacted users, the relevant entity’s estimate of the possible maximum number of affected users should be considered for the purpose of calculating the total number of users affected by the incident.

Holen Sie sich den NIS2-Umsetzungs-Fahrplan und unseren Newsletter!