FREE TEMPLATE · EXCEL WORKBOOK
Incident notification decision and timeline sheet
A working sheet for the first hours of an incident. It walks the reporting lead through the NIS2, DORA, CRA and GDPR classification questions, tracks every reporting deadline from its own start point, and keeps the Benelux recipients and a submission log in one place.
What's inside
- 44 decision questions covering scope, NIS2 significance (incl. Implementing Regulation 2024/2690), DORA major-incident classification, CRA and GDPR
- Deadline tracker for all 18 report types across the four regimes, each with its own start event
- Benelux recipient list (CCB, NCSC portal, ILR, CSSF, NBB/FSMA, DNB/AFM, APD/GBA, AP, CNPD) with account-holder fields
- Submission log to keep facts consistent across regulators
Worksheets
How to use it
- Before any incident, fill in the scope questions (A-02 to A-04) and the account holders on the contacts sheet
- When an incident is declared, record the awareness timestamp in A-01 and work through the decision sheet
- Enter start times on the deadline tracker and calculate each due time; review them at every bridge call
- Log every submission with its reference and approver
- Re-test portal access each quarter and after staff changes
Companion playbook
One incident, four clocks: NIS2, DORA, CRA and GDPR reporting →
Same house style as every Secrato template: a start sheet with instructions, light blue cells to fill in, and version control. Free to use within your organisation. This template is practical guidance, not legal advice.
Get the template
Enter your work e-mail and we will send you a personal download link straight away. We may follow up with related guidance; you can opt out at any time.
