Art. 4 Recurring incidents | Cybersecurity measures and significant incidents for relevant entities | NIS 2

Incidents means an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; that individually are not considered a significant incident means an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; within the meaning of Article 3, shall be considered collectively as one significant incident means an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; where they meet all of the following criteria:

they have occurred at least twice within 6 months;
they have the same apparent root cause;
they collectively meet the criteria set out in Article 3(1)(a).