cybersecurity incident

An event of cyber origin that causes, or is likely to cause, operational, financial, data integrity or availability harm to a regulated service or to the wider provision of critical services; such incidents trigger notification, mitigation and cooperation duties with NÚKIB and CERT.

Any security event that results in the compromise, damage, disruption or unauthorised access to systems, data or services covered by the Act, and which triggers mandatory notification, coordination and remediation obligations under the incident notification regulations.

A cyber security incident includes acts such as theft, unauthorised modification or deletion of data, denial-of-service and other unauthorized conduct that compromises the confidentiality, integrity or availability of computer systems, networks or information. The definition is purposefully broad to cover a range of events requiring reporting, forensic preservation and coordinated response under the Act.