Open training, B4
Incident handling and CSIRT reporting: the 24 h and 72 h deadlines
A workshop for teams that will have to report an incident within the statutory deadline. Not a lecture on the regulations, but practised notifications and a ready procedure that stays in the company.
Duration: 1 day, 9:00 to 16:00
About the course
The regulations allow 24 hours for an early warning and 72 hours for the incident notification. The clock starts the moment somebody realises that something is wrong, not when the management board takes a decision. Organisations miss this deadline not because they do not know the rule, but because nobody had settled beforehand who qualifies the event, who signs the notification and what exactly to write in it.
The day is built around three cases which participants classify and report themselves. We also cover what must not be done in the first hour, because rash actions destroy evidence faster than the attack itself.
Participants leave with the skeleton of their own reporting procedure, not with notes to be rewritten.
Hourly programme
- 9:00What is an incident within the meaning of the regulations and what is not. Classification and thresholds
- 10:00The clock starts. What has to happen in the first 24 hours
- 11:00Break
- 11:15Early warning, the update after 72 hours, the final report. Content and form
- 12:15Workshop: we classify and report three cases
- 13:00Lunch break
- 13:45Communication. Who says what to whom: the board, clients, the authority, the media
- 14:45Evidence and the incident register. What has to remain after the event
- 15:30Questions
Who it is for
IT teams, security coordinators, the service desk, people who report incidents.
Outcome
Participants can qualify an incident, meet the statutory deadlines and prepare a notification with the right content. They leave with the skeleton of their own reporting procedure and three practised scenarios.
Materials
Model procedure, incident qualification form, report templates, a submission template, a checklist for the first 24 hours, a template incident register, certificate.
Format and group size
Live online or on site, group of 6 to 15 people.
Prerequisites
None.
Dates
B4
Registration openIncident handling and CSIRT reporting: the 24 h and 72 h deadlines
21 October 2026, Wednesday9:00 to 16:00, 1 day, 9:00 to 16:00Online1 290 PLN net for registrations up to 30 September 2026
1 490 PLN net after that date
per person
Registration until 16 October 2026
Both days in the "Bundle: 21 and 22 October" bundle. You can choose the bundle in the registration form.
2 190 PLN net for registrations up to 30 September 2026
2 490 PLN net after that date
Training sessions are not recorded.
Prices are net amounts, to which VAT at 23% is added. Buyers financing the training at least 70% from public funds are asked to notify us before the invoice is issued.