NIS2 incident report in 10 minutes

NIS2 puts an incident on a clock. If a client is affected, an early warning is due within 24 hours, a full notification within 72 hours, and a final report within 30 days. Most small WordPress agencies and freelancers are not in scope themselves, but their clients are, and the supply chain rules pull us in anyway. This 10-minute lightning talk walks through that reporting workflow from a small agency’s point of view: what counts as an incident, what to have ready before anything breaks, and the five steps from detection to the 30-day report. It also shows where AI can help.