Polish firms face fines for failing to report cyberattacks within 72 hours

Poland's Ministry of Digitalisation is preparing regulations that will define thresholds for classifying an incident as serious across 15 economic sectors. Entities covered by the National Cybersecurity System will be required to report serious incidents to the relevant sectoral CSIRT within 72 hours. Failure to comply will result in penalties.