NIS2 Incident Response Checklist
Reporting obligation in 72 hours
- 4
- Sections
- 11
- Checkpoints
- A4 · Print
Checklist · 11 items
Get the checklist as PDF
Enter your email and we send you the full checklist as a printable PDF right away.
What's inside
- All 4 clauses of the standard covered, from scope to certificate
- 11 concrete checkpoints to tick off, each with a short explanation
- Stage 1 and Stage 2 audit clearly separated so nothing surfaces at the auditor
- A PDF to print, share with your team and check off
11 points your company needs to clarify now to respond to a security incident in a NIS2-compliant way.
Basics & Registration
3 Checkpoints
Check if you are in scope
Does your company fall under NIS2? Check your sector and size via the BSI registration portal.
Complete BSI registration
Register with the BSI within 3 months of the NIS2UmsuCG entering into force.
Appoint an incident response manager
A person or team that is notified immediately for every incident and coordinates the response.
Detection & Classification
3 Checkpoints
Set up monitoring and alerting
Collect logs from critical systems, automatic alerts for suspicious activity. 24/7.
Define significance criteria
When is an incident significant? Severe operational disruption or substantial damage to third parties.
Document the classification process
Incidents must be detected and classified within hours.
Reporting Process
3 Checkpoints
Ensure 24-hour early warning capability
Organisational ability to submit an initial notification to BSI/CSIRT within 24 hours.
Prepare 72-hour incident notification
Template for the detailed notification: severity, suspected origin, indicators of compromise.
Set up the 30-day final report process
Post-mortem with full description, root cause, and measures taken.
Supply Chain & Improvement
2 Checkpoints
Inventory critical suppliers
List of all suppliers with security assessments and contractual security requirements.
Establish a post-mortem process
After every incident: what went wrong? Where should monitoring have caught it? Implement improvements.
Get the complete checklist as a PDF
All 11 checkpoints on A4 to print and check off. Free, all you need is your email address.