Rendered illustrationSimulated scenario
The 03:12 emergency: one incident, four statutory clocks — every notification drafted in minutes
Ransomware hits a municipal utility. The moment the crisis team becomes aware, four deadlines start at once: 24 hours for the early warning to the BSI, 72 hours for the full notification, 72 hours for the parallel GDPR Art. 33 report to the supervisory authority, one month for the final report. Six agents produce all five documents ready for decision — every statement carrying its article and paragraph, every unconfirmed point marked unconfirmed. Filing and release stay human.
24 h · 72 h
early warning and notification to the BSI — Art. 23(4) NIS2 · § 32 BSIG
Two clocks
NIS2 and GDPR Art. 33 run in parallel — different authority, different content
Release
drafts for the human — the filing stays your act