Deadlines
| Report | Time limit (CDR (EU) 2025/301 Article 5) | How the app calculates it |
|---|---|---|
| Initial notification | Within 4 hours from classification as major, and no later than 24 hours from becoming aware of the incident. If the incident is classified as major more than 24 hours after detection, within 4 hours from classification (Article 5(2)). | The earlier of classified + 4 h and detected + 24 h; classified + 4 h when classified late. |
| Intermediate report | Within 72 hours from the initial notification, even if nothing has changed. | Initial notification submitted + 72 h. |
| Final report | Within one month from the latest intermediate report. | Latest intermediate report submitted + 1 month. |
All times are shown in Swedish time (Europe/Stockholm).
Weekends and bank holidays
Article 5(4) lets a report whose deadline falls on a weekend or a bank holiday be submitted by 12:00 on the next working day. The app uses the Swedish bank holidays.
Article 5(5) excludes the following from this relief for the initial notification and the intermediate report:
- credit institutions,
- central counterparties,
- trading venues (operators of trading venues), and
- entities that are essential or important entities under NIS2.
For these entities only the final report moves to the next working day. Set the type of entity, and whether you are a NIS2 entity, under Settings; the app applies the rule automatically.
Status
| Status | Meaning |
|---|---|
| Not started | The clock has not started (for example, the previous report has not been submitted). |
| Pending | The deadline is more than four hours away. |
| Due soon | Less than four hours remain. |
| Overdue | The deadline has passed without a recorded submission. |
| Submitted on time / late | The submission time is recorded. |
Cannot meet a deadline?
Article 5(3) requires you to inform FI before the deadline expires and explain the reasons. Document when FI was informed.