nis2-data/data/deadlines.json at main · directive-zero/nis2-data · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
{
  "$schema": "./schema/deadlines.schema.json",
  "dataset": "nis2-de-bsig-deadlines",
  "version": "1.0.0",
  "jurisdiction": "DE",
  "languagePrimary": "de",
  "sourceNote": "Extracted from the Directive Zero v1 browser tools without legal-content rewrites.",
  "deadlineGroups": [
    {
      "id": "incident-reporting",
      "deadlineIds": ["incident-early-warning", "incident-follow-up", "incident-final-report"],
      "summary": {
        "de": "Erstmeldung binnen 24 h, Folgemeldung binnen 72 h, Abschlussbericht nach 1 Monat.",
        "en": "Early warning in 24h, follow-up in 72h, final report after 1 month."
      }
    }
  ],
  "deadlines": [
    {
      "id": "registration",
      "ref": "§33 BSIG",
      "trigger": {
        "de": "ab Betroffenheit",
        "en": "from becoming in scope"
      },
      "duration": "P3M",
      "label": {
        "de": "Registrierung: 3 Monate ab Betroffenheit",
        "en": "Registration: 3 months from becoming in scope"
      },
      "summary": {
        "de": "Registrierung innerhalb von 3 Monaten über das BSI-Portal.",
        "en": "Registration via the BSI portal within 3 months."
      }
    },
    {
      "id": "change-notification",
      "ref": "§§33-34 BSIG",
      "trigger": {
        "de": "ab Änderung registrierter Angaben",
        "en": "from changes to registered information"
      },
      "duration": "P2W",
      "label": {
        "de": "Änderungen: 2 Wochen",
        "en": "Changes: 2 weeks"
      },
      "summary": {
        "de": "Änderungen müssen binnen 2 Wochen aktualisiert werden.",
        "en": "Changes must be updated within 2 weeks."
      }
    },
    {
      "id": "incident-early-warning",
      "ref": "§32 BSIG",
      "trigger": {
        "de": "ab Kenntnis eines erheblichen Sicherheitsvorfalls",
        "en": "from awareness of a significant security incident"
      },
      "duration": "PT24H",
      "label": {
        "de": "Erstmeldung: 24 Stunden ab Kenntnis",
        "en": "Early warning: 24 hours from awareness"
      },
      "summary": {
        "de": "Erstmeldung binnen 24 h.",
        "en": "Early warning in 24h."
      }
    },
    {
      "id": "incident-follow-up",
      "ref": "§32 BSIG",
      "trigger": {
        "de": "ab Kenntnis eines erheblichen Sicherheitsvorfalls",
        "en": "from awareness of a significant security incident"
      },
      "duration": "PT72H",
      "label": {
        "de": "Folgemeldung: 72 Stunden ab Kenntnis",
        "en": "Follow-up: 72 hours from awareness"
      },
      "summary": {
        "de": "Folgemeldung binnen 72 h.",
        "en": "Follow-up in 72h."
      }
    },
    {
      "id": "incident-final-report",
      "ref": "§32 BSIG",
      "trigger": {
        "de": "ab Kenntnis eines erheblichen Sicherheitsvorfalls",
        "en": "from awareness of a significant security incident"
      },
      "duration": "P1M",
      "label": {
        "de": "Abschlussmeldung: 1 Monat ab Kenntnis",
        "en": "Final report: 1 month from awareness"
      },
      "summary": {
        "de": "Abschlussbericht nach 1 Monat.",
        "en": "Final report after 1 month."
      }
    }
  ]
}