NIS2

Actually test your incident response plan, not just write it

The European Union flag waving against a cloudy sky

#Technology 📅 Year-round

A documented incident response plan that nobody has ever practiced tends to fall apart the moment a real incident starts — people don't know their role, contact lists are outdated, and the reporting clock is already running while everyone's figuring it out from scratch. Run at least a basic tabletop exercise so the plan gets tested before it's needed for real. This isn't legal advice — talk to someone who specializes in NIS2 compliance if you're unsure what your obligations are.

← All challenges