Technical guideline on reporting incidents: Article 13a implementation

This document gives guidance to National Regulatory Authorities (NRAs) about the implementation of Article 13a of Directive 2009/140/EC and, in particular, the two types of incident reporting mentioned in the Article: the annual summary reporting of significant incidents to the European Network and Information Security Agency (ENISA) and the European Commission, and ad hoc notification of incidents to other NRAs in case of cross-border incidents. The document defines the scope of incident reporting, the incident parameters and thresholds. It also contains a reporting template for submitting incident reports to ENISA and the Commission, and it explains how the incident reports will be processed by ENISA.

ENISA: Press Release, 13.12.11: Clarifying cyber security incident reporting: Guidelines on how to implement the new telecom legislation on securityand integrity 'Art 13a' http://www.enisa.europa.eu/media/press-releases/clarifying-cyber-security-incident-reporting-guidelines-on-how-to-implement-the-new-telecom-legislation-on-security-integrity-201cart-13a201d

ENISA: Technical guideline for minimum security measures: Guidance on the security measures in article13a http://www.enisa.europa.eu/act/res/reporting-incidents/minimum-security-requirements/technical-guideline-on-minimum-security-measures/

---