The organization should:

  • Assess the impact on its own services
  • Activate internal incident response procedures
  • Notify authorities if required under NIS2
  • Coordinate with the supplier for mitigation