ITER/CYCyprus
What the record establishes for Cyprus: the bodies an insider event is reported to, the channel each takes, and the act that transposes the NIS2 Directive, Directive (EU) 2022/2555.
Recipients
| Reached under | Body | Channel | Source |
|---|---|---|---|
| Data protection authorityGDPR, article 33 | Office of the Commissioner for Personal Data Protection reported | — | edpb members |
| CSIRT or competent authorityNIS2, article 23 | The relevant competent authority or the National CSIRT, as the guide puts it reported | There is no portal. The national CSIRT states it plainly: «Μπορείτε να αναφέρετε ένα περιστατικό χρησιμοποιώντας την ηλεκτρονική φόρμα αναφοράς, στέλνοντας την κατάλληλα συμπληρωμένη φόρμα υποβολής περιστατικού στην ηλεκτρονική διεύθυνση REPORTING@CSIRT.CY ή να μας τηλεφωνήσετε στο 1490»: a form, an address, and a telephone number. | cy dsa nis2 guide · csirt cy anafora |
| Financial supervisorDORA, article 19 | Central Bank of Cyprus reported | — | eba competent authorities |
| Market authorityMAR, article 17 | Επιτροπή Κεφαλαιαγοράς (CySEC) reported | — | esma mar nca |
Transposition of NIS2 unresolved
| Act | Not read. The document read is the Authority's summary guide to the Directive, not the Cypriot transposing law. |
|---|---|
| In force | not established |
| Recipient | The relevant competent authority or the National CSIRT, as the guide puts it |
| Moves a term | No. The document read states one deadline that the Directive does not. Its notification timeline gives the stages as 6 h ΕΓΚΑΙΡΗ ΠΡΟΕΙΔΟΠΟΙΗΣΗ (EARLY WARNING), 72 h ΚΟΙΝΟΠΟΙΗΣΗ ΠΕΡΙΣΤΑΤΙΚΟΥ, an intermediate progress report όπως απαιτείται, and 1 μήνας for the ΤΕΛΙΚΗ ΕΚΘΕΣΗ, which it explains as due «το αργότερο ένα μήνα μετά την κοινοποίηση του συμβάντος». Article 23(4)(a) of the Directive gives twenty-four hours for the early warning, not six. The other three stages match. |
| Standing | This is the Digital Security Authority's own summary guide to the Directive, and the six hours appear in its timeline graphic. This record does not conclude that Cypriot law requires six hours: it records that the national authority's published guide states six where the instrument it summarizes states twenty-four. The Cypriot transposing law has not been read, so no Cypriot term is recorded from it, and the recipient is given in the guide's own words rather than named. |
| Source | cy dsa nis2 guide |
An event in Cyprus
The five types, each opened on this jurisdiction: the acts it obliges, the term on each, and where the report goes.