Organizations must follow a structured reporting timeline:

  • 24 hours → Early warning
  • 72 hours → Incident notification
  • 1 month → Final report

Additional reports (progress or intermediate) may be required depending on the situation.