PECB NIS 2 Directive Lead Implementer — Question 2

According to scenario 2, MHospital is committed to issuing an official notification within four days of identifying an incident. Is this in compliance with the NIS 2 Directive requirements?

Answer options

• A. No, the official notification should be issued within 48 hours of identifying the incident
• B. No, the official notification should be issued within 72 hours of identifying the incident
• C. Yes, the official notification should be issued within 96 hours of identifying the incident

Correct answer: C

Explanation

The correct answer is C because the NIS 2 Directive allows for a notification period of up to 96 hours following the identification of an incident. Options A and B are incorrect as they suggest shorter notification periods that do not align with the directive's requirements.