{"id":28254,"date":"2026-02-01T05:36:27","date_gmt":"2026-02-01T05:36:27","guid":{"rendered":"https:\/\/sunbytes.io\/wp\/nis2-article-23-incident-reporting\/"},"modified":"2026-09-15T09:08:07","modified_gmt":"2026-09-15T09:08:07","slug":"nis2-article-23-incident-reporting","status":"publish","type":"post","link":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/","title":{"rendered":"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb)"},"content":{"rendered":"\n<p class=\"eplus-wrapper wp-block-paragraph\">De meeste incidenten beginnen niet met een dramatisch <em>\u201cwe zijn gehackt\u201d<\/em>. Ze starten vaak met subtiele signalen, zoals tragere dienstverlening, ongebruikelijke inlogactiviteit of klantvragen over onregelmatigheden.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Dat leidt al snel tot de vraag: <strong>\u201cIs dit meldingsplichtig onder NIS2?\u201d<\/strong> Als jouw organisatie onder NIS2 valt (check <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/is-nis2-op-ons-van-toepassing\/\" target=\"_blank\" rel=\"noreferrer noopener\">hier of dat zo is<\/a><\/strong>), zit de grootste uitdaging niet in het begrijpen van de wet. Die zit in <strong>snel en effectief handelen<\/strong>, terwijl je team tegelijkertijd het incident onder controle probeert te krijgen.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Deze gids biedt een <strong>praktische workflow voor incidentrapportage volgens Artikel 23<\/strong>, specifiek ingericht voor mkb-organisaties, inclusief <strong>direct inzetbare templates<\/strong> voor je nationale meldportaal.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Bekijk ook: <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-compliance-readiness-checklist-voor-eu-mkb\/\" target=\"_blank\" rel=\"noreferrer noopener\">NIS2 Compliance Readiness voor EU-MKB: Essenti\u00eble gids + praktische checklist<\/a><\/strong><\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">TL;DR: wat is de NIS2-tijdlijn van 24\u201372\u201330?<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Zodra je je bewust wordt van een <strong>significant incident<\/strong>, verwacht Artikel 23 gefaseerde rapportage:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><strong>Binnen 24 uur:<\/strong> vroege waarschuwing (een geloofwaardige eerste melding)<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Binnen 72 uur:<\/strong> incidentmelding (eerste beoordeling + impact)<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Binnen 30 dagen:<\/strong> eindrapport (oorzaak, maatregelen en doorgevoerde verbeteringen)<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Zie het zo:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><strong>24 uur:<\/strong> \u201cDit ziet er serieus uit en we zijn in actie.\u201d<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>72 uur:<\/strong> \u201cDit weten we nu en dit betekent het.\u201d<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>30 dagen:<\/strong> \u201cDit is het volledige verhaal \u00e9n wat we structureel hebben verbeterd.\u201d<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/is-nis2-op-ons-van-toepassing\/\" target=\"_blank\" rel=\"noreferrer noopener\">Snelle check of NIS2 op jou van toepassing is<\/a><\/strong>.<\/p>\n\n\n\n<figure class=\" wp-block-image aligncenter size-full eplus-wrapper\"><img decoding=\"async\" width=\"1000\" height=\"587\" src=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Incident-Report.webp\" alt=\"NIS2 Incident Report\" class=\"wp-image-28241\" srcset=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Incident-Report.webp 1000w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Incident-Report-300x176.webp 300w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Incident-Report-768x451.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Stap 1 \u2014 Neem snel een besluit: is dit een \u2018significant incident\u2019?<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Hier verliezen mkb\u2019s vaak tijd \u2014 niet door onwil, maar door twijfel.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Een praktische aanpak is een <strong>\u2018significance huddle\u2019 van 10 minuten<\/strong>:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Incident lead (IT\/Security) brengt de feiten<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Business owner (CEO\/COO) neemt het besluit<\/li>\n\n\n\n<li class=\" eplus-wrapper\">E\u00e9n persoon legt het besluit en de onderbouwing vast<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Stel drie vragen:<\/p>\n\n\n\n<ol class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Kan dit de bedrijfsvoering ernstig verstoren?<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Kan dit leiden tot significante financi\u00eble schade?<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Kan dit klanten of partners merkbaar raken?<\/li>\n<\/ol>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Als het antwoord op \u00e9\u00e9n van deze vragen <strong>\u201cmogelijk wel\u201d<\/strong> is, behandel het incident dan als significant totdat het tegendeel is vastgesteld.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Tip:<\/strong> Begin \u2014 als je dat nog niet hebt gedaan \u2014 met de <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-compliance-readiness-checklist-voor-eu-mkb\/#spacer\" target=\"_blank\" rel=\"noreferrer noopener\">NIS2-readiness checklist voor EU-mkb\u2019s<\/a><\/strong>. Die helpt vooraf rollen, bewijslast en beheersmaatregelen vast te leggen, nog v\u00f3\u00f3r er een incident plaatsvindt.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Stap 2 \u2014 Wat stuur je binnen 24 uur (vroege waarschuwing)?<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">De update binnen 24 uur is <strong>geen forensisch rapport<\/strong>. Het is een helder en rustig signaal.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Een goede vroege waarschuwing bevat:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">wat je ziet (alleen feiten)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat is geraakt<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat je op dit moment doet<\/li>\n\n\n\n<li class=\" eplus-wrapper\">of er sprake is van vermoedelijke kwaadwillende activiteit (of dat dit nog onbekend is)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">of er mogelijk grensoverschrijdende impact is (indien van toepassing)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wanneer je een volgende update verwacht<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Het doel: <strong>laten zien dat je controle hebt en geloofwaardig handelt<\/strong>, zonder meer te claimen dan je weet.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Stap 3 \u2014 Wat stuur je binnen 72 uur (incidentmelding)?<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Na 72 uur heb je meestal genoeg informatie om een eerste inhoudelijke beoordeling te delen.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Je incidentmelding bevat idealiter:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">eerste inschatting van ernst en impact<\/li>\n\n\n\n<li class=\" eplus-wrapper\">getroffen systemen en diensten<\/li>\n\n\n\n<li class=\" eplus-wrapper\">of beschikbaarheid, vertrouwelijkheid of integriteit in het geding is<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat je tot nu toe hebt gedaan (containment, mitigatie, herstel)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">IoC\u2019s waar beschikbaar (IP\u2019s, domeinen, hashes, accounts)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">vervolgstappen (monitoring, volgende update)<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Zijn er nog geen indicators of compromise beschikbaar? Benoem dat expliciet.<br>Wat telt, is dat je <strong>gestructureerd bewijs verzamelt<\/strong>.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Stap 4 \u2014 Het eindrapport (binnen 30 dagen): het volledige verhaal<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Het eindrapport laat zien hoe volwassen je organisatie omgaat met incidentrespons.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Gebruik deze structuur:<\/p>\n\n\n\n<ol class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Wat is er gebeurd (tijdlijn + ernst + impact)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Waarschijnlijke oorzaak \/ type dreiging<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Toegepaste (en lopende) maatregelen<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Grensoverschrijdende impact (indien van toepassing)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Wat is aangepast (lessons learned + verbeteringen)<\/li>\n<\/ol>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">In deze fase zijn bredere beheersmaatregelen belangrijk, zoals incidentafhandeling, monitoring, toegangsbeheer en leveranciersrisico. Voor een praktisch overzicht van basismaatregelen: zie <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-21-requirements-explained\/\" target=\"_blank\" rel=\"noreferrer noopener\">NIS2 Artikel 21 \u2013 in begrijpelijke taal<\/a><\/strong>.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Het mkb-voordeel: bouw vanaf minuut \u00e9\u00e9n een \u2018evidence pack\u2019<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">De meeste rapportageproblemen ontstaan door \u00e9\u00e9n simpele oorzaak: <strong>feiten liggen verspreid<\/strong>. Maak daarom \u00e9\u00e9n centrale <strong>Incident Reporting Pack<\/strong> (map of dossier) met:<\/p>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">A) Tijdlijn<\/h3>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">moment van eerste detectie<\/li>\n\n\n\n<li class=\" eplus-wrapper\">moment van \u2018bewustwording\u2019<\/li>\n\n\n\n<li class=\" eplus-wrapper\">kernacties met tijdstempels<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">B) Impact-overzicht<\/h3>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">getroffen systemen\/diensten<\/li>\n\n\n\n<li class=\" eplus-wrapper\">aantal getroffen gebruikers of klanten (eerste inschatting is toegestaan)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">periode van uitval of degradatie<\/li>\n\n\n\n<li class=\" eplus-wrapper\">financi\u00eble exposure (globale bandbreedte)<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">C) Werkend narratief<\/h3>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">actuele interpretatie van het incident (met versiegeschiedenis)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat nog onbekend is (expliciet benoemd)<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">D) Technische artefacten<\/h3>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">verwijzingen naar relevante logs (geen ruwe dumps)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">IoC\u2019s (indien beschikbaar)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">genomen containmentmaatregelen<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">E) Besluiten &amp; goedkeuringen<\/h3>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">wie het incident significant verklaarde<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wie communicatie goedkeurde<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wie wat wanneer heeft aangeleverd<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Deze aanpak verschuift je reactie van <strong>reactief naar aantoonbaar beheerst<\/strong> \u2014 cruciaal voor toezichthouders \u00e9n zakelijke klanten.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Templates (kopieer &amp; plak)<\/h2>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Template 1 \u2014 24u Vroege waarschuwing<\/h3>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Onderwerp:<\/strong> NIS2 Early Warning \u2014 Mogelijk significant incident (Bedrijf \/ Dienst)<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Organisatie<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Entiteitsnaam:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Sector:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Primair contact (24\/7):<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Alternatief contact:<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Wat is er gebeurd (alleen feiten)<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Eerste detectie:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Bewustwording:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Getroffen dienst\/systeem:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Huidige status: lopend \/ ingedamd \/ onderzoek loopt<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Waarom mogelijk significant<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Operationele verstoring: ja\/nee (waarom)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Waarschijnlijke financi\u00eble impact: ja\/nee (bandbreedte)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Mogelijke impact op klanten\/partners: ja\/nee<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Vermoede kenmerken<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Kwaadwillende activiteit: ja\/nee\/onbekend<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Mogelijke grensoverschrijdende impact: ja\/nee\/onbekend<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Onder-nomen acties<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Containment:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Mitigatie:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Verwachte tijd volgende update:<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Template 2 \u2014 72u Incidentmelding<\/h3>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Onderwerp:<\/strong> NIS2 Incident Notification (72u) \u2014 Update significant incident<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Samenvatting (max. 5 regels)<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Wat is er gebeurd:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Wat is geraakt:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Huidige status:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Belangrijkste risico:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Volgende acties:<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Eerste inschatting ernst &amp; impact<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Impact op beschikbaarheid:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Impact op vertrouwelijkheid\/integriteit:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Getroffen gebruikers\/klanten:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Duur:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Relevante schade-indicatoren:<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Technische details<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Vermoede\/bevestigde aanvalsvector:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Betrokken systemen:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">IoC\u2019s (indien beschikbaar):<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Verwijzingen naar bewijs (logs, ticket-ID\u2019s, etc.):<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Mitigatie &amp; herstel<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Containment:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Eliminatie:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Herstel:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Monitoring:<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Afhankelijkheden \/ grensoverschrijdend (indien van toepassing)<\/strong><\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Mogelijk getroffen landen:<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Betrokken leveranciers\/providers:<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Template 3 \u2014 Eindrapport (binnen 30 dagen)<\/h3>\n\n\n\n<ol class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Gedetailleerde incidentbeschrijving (ernst + impact)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Waarschijnlijke oorzaak \/ type dreiging<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Toegepaste en lopende maatregelen<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Grensoverschrijdende impact (indien van toepassing)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Lessons learned + doorgevoerde verbeteringen<\/li>\n<\/ol>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Lichtgewicht RACI (voor helderheid en snelheid)<\/h2>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><strong>Incident Lead (Accountable):<\/strong> Head of IT \/ Security lead<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Business Owner (Approves):<\/strong> CEO\/COO<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Legal\/Compliance (Consulted):<\/strong> verplichtingen + vastlegging<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Communicatie (Consulted):<\/strong> klantgerichte messaging<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Engineering\/Ops (Responsible):<\/strong> containment + herstel<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Externe ondersteuning (Support):<\/strong> IR \/ forensics \/ rapportage<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Voor mkb\u2019s geldt: <strong>eenvoud wint<\/strong>. Duidelijke processen zorgen voor snellere, betere respons.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Veelgemaakte fouten (en hoe je ze voorkomt)<\/h2>\n\n\n\n<figure class=\" wp-block-image aligncenter size-full eplus-wrapper\"><img decoding=\"async\" width=\"1000\" height=\"563\" src=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Compliance-Readiness.webp\" alt=\"NIS2 Compliance Readiness\" class=\"wp-image-28237\" srcset=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Compliance-Readiness.webp 1000w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Compliance-Readiness-300x169.webp 300w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Compliance-Readiness-768x432.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<ol class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Wachten op zekerheid \u2192 24-uursvenster missen<\/li>\n\n\n\n<li class=\" eplus-wrapper\">\u2018Bewustwordingstijd\u2019 niet vastleggen \u2192 discussie over tijdlijn<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Incidentrespons en rapportage door elkaar laten lopen \u2192 \u00e9\u00e9n van beide sneuvelt<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Geen versiebeheer \u2192 feiten verschuiven tussen teams<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Geen centraal narratief \u2192 rapportages worden fragmenten<\/li>\n<\/ol>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Wil je een kant-en-klaar reporting pack?<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Wij helpen je deze playbook om te zetten in een <strong>evidence-gedreven workflow<\/strong> die je team ook onder druk kan draaien.<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">24\u201372\u201330 templates afgestemd op jouw omgeving<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Evidence-packstructuur en duidelijke rollen (RACI)<\/li>\n<\/ul>\n\n\n\n<div class=\" wp-block-cover alignfull is-repeated eplus-wrapper\" style=\"min-height:146px;aspect-ratio:unset;\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim-40 has-background-dim\" style=\"background-color:#000000\"><\/span><div role=\"img\" class=\"wp-block-cover__image-background wp-image-41706 is-repeated\" style=\"background-position:50% 50%;background-image:url(https:\/\/sunbytes.io\/wp-content\/uploads\/2025\/12\/test.png)\"><\/div><div class=\"wp-block-cover__inner-container is-layout-flow wp-block-cover-is-layout-flow\">\n<p class=\"has-text-align-center eplus-wrapper wp-block-paragraph\" style=\"font-size:25px\"><strong>Leveringsproces conform ISO 27001<\/strong> <strong>\u2022 GDPR-bewust ontworpen<\/strong> <strong>\u2022 Ervaring met ondersteuning van ISO 27001<\/strong><\/p>\n\n\n\n<div class=\"wp-block-buttons eplus-wrapper is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-4927ffd3 wp-block-buttons-is-layout-flex\">\n<div class=\" wp-block-button eplus-wrapper\"><a class=\"wp-block-button__link has-luminous-vivid-amber-background-color has-background wp-element-button\" href=\"https:\/\/sunbytes.io\/nl\/cybersecurity-service-provider\/sunbytes-compliance-readiness\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Plan een gesprek over naleving van regelgeving<\/strong><\/a><\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Over Sunbytes: Transform \u00b7 Secure \u00b7 Accelerate<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sunbytes<\/a><\/strong> is gebouwd op drie samenhangende pijlers:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/tech-service\/\" target=\"_blank\" rel=\"noreferrer noopener\">Transform<\/a>:<\/strong> We moderniseren producten en delivery, zodat digitale groei niet gepaard gaat met verborgen kwetsbaarheid.<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/cybersecurity-service-provider\/\" target=\"_blank\" rel=\"noreferrer noopener\">Secure<\/a>:<\/strong> We maken cybersecurity praktisch en uitvoerbaar, ge\u00efntegreerd in je deliveryprocessen.<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/hr-diensten\/\" target=\"_blank\" rel=\"noreferrer noopener\">Accelerate<\/a>:<\/strong> We helpen organisaties opschalen met de juiste mensen en systemen \u2014 m\u00e9t behoud van kwaliteit en compliance.<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Samen zorgen deze pijlers niet alleen voor compliance, maar voor een delivery-engine die <strong>bestand is tegen toezicht<\/strong>, juist tijdens incidentrespons.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAQs<\/h2>\n<section class=\"faq-section faq-section--full alignfull wp-block-sb-block-faq-section is-layout-flow wp-block-sb-block-faq-section-is-layout-flow\">\n            \n        <div class=\"faq-section__items\">\n            <div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-15\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-16\"\n        >\n            <span class=\"faq-item__question-text\">Wat is de NIS2 24\u201372\u201330-tijdlijn?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-16\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-15\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            <p data-start=\"10286\" data-end=\"10438\">Als NIS2 op jou van toepassing is en je je bewust bent van een significant incident, moet je kunnen leveren:<\/p>\n\n<ol data-start=\"10440\" data-end=\"10527\">\n\n<li data-start=\"10440\" data-end=\"10468\">\n\n<p data-start=\"10443\" data-end=\"10468\">24u vroege waarschuwing<\/p>\n\n<\/li>\n\n<li data-start=\"10469\" data-end=\"10493\">\n\n<p data-start=\"10472\" data-end=\"10493\">72u incidentmelding<\/p>\n\n<\/li>\n\n<li data-start=\"10494\" data-end=\"10527\">\n\n<p data-start=\"10497\" data-end=\"10527\">Eindrapport binnen \u00e9\u00e9n maand<\/p>\n\n<\/li>\n\n<\/ol>\n\nBekijk ook: <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-compliance-readiness-checklist-voor-eu-mkb\/\" target=\"_blank\" rel=\"noreferrer noopener\">NIS2 Compliance Readiness voor EU-MKB: Essenti\u00eble gids + praktische checklist<\/a><\/strong>        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-17\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-18\"\n        >\n            <span class=\"faq-item__question-text\">Wanneer start de NIS2-rapportageklok?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-18\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-17\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            In de praktijk vanaf het moment dat je organisatie zich bewust wordt van een mogelijk significant incident \u2014 leg dat moment vroeg vast.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-19\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-20\"\n        >\n            <span class=\"faq-item__question-text\">Wat is een \u2018significant incident\u2019 onder NIS2?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-20\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-19\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Kan het de operatie verstoren, financi\u00eble schade veroorzaken of klanten\/partners raken? Zo ja of mogelijk: behandel het als significant.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-21\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-22\"\n        >\n            <span class=\"faq-item__question-text\">Wat hoort in de 24-uursmelding?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-22\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-21\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Alleen feiten: wat je ziet, wat geraakt is, wat je doet, vermoeden van kwaadwillendheid (of onbekend), mogelijke grensoverschrijdende impact en het moment van de volgende update.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-23\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-24\"\n        >\n            <span class=\"faq-item__question-text\">Wat als we na 72 uur nog geen IoC\u2019s hebben?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-24\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-23\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Dat is gebruikelijk. Benoem dit expliciet en committeer je aan een update zodra ze beschikbaar zijn.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-25\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-26\"\n        >\n            <span class=\"faq-item__question-text\">Wanneer is het eindrapport verschuldigd?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-26\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-25\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Hanteer intern 30 dagen: binnen \u00e9\u00e9n maand na de 72-uursmelding.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-27\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-28\"\n        >\n            <span class=\"faq-item__question-text\">Wie is eigenaar van NIS2-incidentrapportage binnen het mkb?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-28\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-27\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Houd het simpel: IT\/Security voor de feiten, CEO\/COO voor besluit en communicatie, Legal\/Compliance ter ondersteuning.        <\/div>\n    <\/div>\n<\/div>\n        <\/div>\n\n            <\/section>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" id=\"contact\" class=\" wp-block-spacer eplus-wrapper\"><\/div>\n\n\n","protected":false},"excerpt":{"rendered":"<p>De meeste incidenten beginnen niet met een dramatisch \u201cwe zijn gehackt\u201d. Ze starten vaak met subtiele signalen, zoals tragere dienstverlening, ongebruikelijke inlogactiviteit of klantvragen over onregelmatigheden. Dat leidt al snel tot de vraag: \u201cIs dit meldingsplichtig onder NIS2?\u201d Als jouw organisatie onder NIS2 valt (check hier of dat zo is), zit de grootste uitdaging niet [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":28239,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"related_mode":"latest","related_category":0,"related_post_ids":[],"footnotes":""},"categories":[46],"tags":[],"class_list":["post-28254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyberbeveiliging"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb) - Sunbytes<\/title>\n<meta name=\"description\" content=\"Een praktische gids voor NIS2 Artikel 23 voor EU-mkb\u2019s: hoe je significante incidenten rapporteert binnen 24 uur, 72 uur en 30 dagen \u2014 inclusief templates en een checklist voor een evidence pack.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb) - Sunbytes\" \/>\n<meta property=\"og:description\" content=\"Een praktische gids voor NIS2 Artikel 23 voor EU-mkb\u2019s: hoe je significante incidenten rapporteert binnen 24 uur, 72 uur en 30 dagen \u2014 inclusief templates en een checklist voor een evidence pack.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/\" \/>\n<meta property=\"og:site_name\" content=\"Sunbytes\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-01T05:36:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-15T09:08:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-23-Incident-Reporting.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Uyen Pham\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Uyen Pham\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#organization\",\"name\":\"Sunbytes\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/SUNBYTES-LOGO.svg\",\"contentUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/SUNBYTES-LOGO.svg\",\"width\":120,\"height\":30,\"caption\":\"Sunbytes\"},\"image\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"knowsAbout\":[\"HR Solutions\",\"Payroll service\",\"EOR service\",\"Tech services\",\"Security services\"]},{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/\"},\"author\":{\"name\":\"Uyen Pham\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/person\\\/1a2ebd7868cce7f226c488f5c29f908f\"},\"headline\":\"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb)\",\"datePublished\":\"2026-02-01T05:36:27+00:00\",\"dateModified\":\"2026-09-15T09:08:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/\"},\"wordCount\":1295,\"publisher\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-23-Incident-Reporting.webp\",\"articleSection\":[\"Cyberbeveiliging\"],\"inLanguage\":\"nl-NL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/\",\"name\":\"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb) - Sunbytes\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-23-Incident-Reporting.webp\",\"datePublished\":\"2026-02-01T05:36:27+00:00\",\"dateModified\":\"2026-09-15T09:08:07+00:00\",\"description\":\"Een praktische gids voor NIS2 Artikel 23 voor EU-mkb\u2019s: hoe je significante incidenten rapporteert binnen 24 uur, 72 uur en 30 dagen \u2014 inclusief templates en een checklist voor een evidence pack.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-23-Incident-Reporting.webp\",\"contentUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-23-Incident-Reporting.webp\",\"width\":1200,\"height\":628,\"caption\":\"NIS2 Article 23 Incident Reporting\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/cyberbeveiliging\\\/nis2-article-23-incident-reporting\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/\",\"name\":\"Sunbytes\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/person\\\/1a2ebd7868cce7f226c488f5c29f908f\",\"name\":\"Uyen Pham\",\"pronouns\":\"She\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/1736750884545-100x100.jpg\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/1736750884545-100x100.jpg\",\"contentUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/1736750884545-100x100.jpg\",\"caption\":\"Uyen Pham\"},\"description\":\"Uyen Pham is a B2B technology marketer and content strategist who turns complex topics into clear, practical insights for business leaders. She writes primarily about Business Transformation Solutions and Cybersecurity Solutions, helping readers better understand how to modernise operations, strengthen security, and make informed technology decisions. Her articles combine industry news and practical guidance that businesses can apply to real-world challenges.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/uyen-karen-pham-392b351a1\\\/\"],\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/author\\\/uyen-pham\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb) - Sunbytes","description":"Een praktische gids voor NIS2 Artikel 23 voor EU-mkb\u2019s: hoe je significante incidenten rapporteert binnen 24 uur, 72 uur en 30 dagen \u2014 inclusief templates en een checklist voor een evidence pack.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/","og_locale":"nl_NL","og_type":"article","og_title":"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb) - Sunbytes","og_description":"Een praktische gids voor NIS2 Artikel 23 voor EU-mkb\u2019s: hoe je significante incidenten rapporteert binnen 24 uur, 72 uur en 30 dagen \u2014 inclusief templates en een checklist voor een evidence pack.","og_url":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/","og_site_name":"Sunbytes","article_published_time":"2026-02-01T05:36:27+00:00","article_modified_time":"2026-09-15T09:08:07+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-23-Incident-Reporting.webp","type":"image\/webp"}],"author":"Uyen Pham","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Uyen Pham","Geschatte leestijd":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/sunbytes.io\/nl\/#organization","name":"Sunbytes","url":"https:\/\/sunbytes.io\/nl\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/08\/SUNBYTES-LOGO.svg","contentUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/08\/SUNBYTES-LOGO.svg","width":120,"height":30,"caption":"Sunbytes"},"image":{"@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/logo\/image\/"},"knowsAbout":["HR Solutions","Payroll service","EOR service","Tech services","Security services"]},{"@type":"Article","@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#article","isPartOf":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/"},"author":{"name":"Uyen Pham","@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/person\/1a2ebd7868cce7f226c488f5c29f908f"},"headline":"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb)","datePublished":"2026-02-01T05:36:27+00:00","dateModified":"2026-09-15T09:08:07+00:00","mainEntityOfPage":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/"},"wordCount":1295,"publisher":{"@id":"https:\/\/sunbytes.io\/nl\/#organization"},"image":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#primaryimage"},"thumbnailUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-23-Incident-Reporting.webp","articleSection":["Cyberbeveiliging"],"inLanguage":"nl-NL"},{"@type":"WebPage","@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/","url":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/","name":"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb) - Sunbytes","isPartOf":{"@id":"https:\/\/sunbytes.io\/nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#primaryimage"},"image":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#primaryimage"},"thumbnailUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-23-Incident-Reporting.webp","datePublished":"2026-02-01T05:36:27+00:00","dateModified":"2026-09-15T09:08:07+00:00","description":"Een praktische gids voor NIS2 Artikel 23 voor EU-mkb\u2019s: hoe je significante incidenten rapporteert binnen 24 uur, 72 uur en 30 dagen \u2014 inclusief templates en een checklist voor een evidence pack.","breadcrumb":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#primaryimage","url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-23-Incident-Reporting.webp","contentUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-23-Incident-Reporting.webp","width":1200,"height":628,"caption":"NIS2 Article 23 Incident Reporting"},{"@type":"BreadcrumbList","@id":"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-article-23-incident-reporting\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sunbytes.io\/nl\/"},{"@type":"ListItem","position":2,"name":"NIS2 Artikel 23-rapportage: Wat je aanlevert binnen 24 uur, 72 uur en 30 dagen (EU-mkb)"}]},{"@type":"WebSite","@id":"https:\/\/sunbytes.io\/nl\/#website","url":"https:\/\/sunbytes.io\/nl\/","name":"Sunbytes","description":"","publisher":{"@id":"https:\/\/sunbytes.io\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sunbytes.io\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Person","@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/person\/1a2ebd7868cce7f226c488f5c29f908f","name":"Uyen Pham","pronouns":"She","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/06\/1736750884545-100x100.jpg","url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/06\/1736750884545-100x100.jpg","contentUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/06\/1736750884545-100x100.jpg","caption":"Uyen Pham"},"description":"Uyen Pham is a B2B technology marketer and content strategist who turns complex topics into clear, practical insights for business leaders. She writes primarily about Business Transformation Solutions and Cybersecurity Solutions, helping readers better understand how to modernise operations, strengthen security, and make informed technology decisions. Her articles combine industry news and practical guidance that businesses can apply to real-world challenges.","sameAs":["https:\/\/www.linkedin.com\/in\/uyen-karen-pham-392b351a1\/"],"url":"https:\/\/sunbytes.io\/nl\/blog\/author\/uyen-pham\/"}]}},"_links":{"self":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/posts\/28254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/comments?post=28254"}],"version-history":[{"count":0,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/posts\/28254\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/media\/28239"}],"wp:attachment":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/media?parent=28254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/categories?post=28254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/tags?post=28254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}