---
title: "Prepare your incident response"
description: "Prepare your incident response, family Respond, NIS2 Art. 21(2)(b)"
url: https://www.alt-f1.be/en/table/ir/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Prepare your incident response

Short label: RESPONSE

Family: Respond · NIS2 Art. 21(2)(b)
<a id="meaning"></a>

## Meaning

Agree who does what when an incident is suspected: assess, contain, preserve records, communicate and recover.

<a id="why"></a>

## Why it matters

A prepared plan helps people act consistently under pressure.

<a id="actions"></a>

## What you can do

Keep a contact list and first-hour plan, then rehearse a realistic incident. Assess any legal reporting duty using the incident’s facts and applicable rules.

## Services that can help

Device Shield and Web App Shield provide agreed protective actions and records. Workshops rehearse the plan. Response timing and included support are contractual arrangements.

- [Device Shield](https://www.alt-f1.be/en/device-shield.md)
- [Web App Shield](https://www.alt-f1.be/en/web-shield.md)
- [Workshops](https://www.alt-f1.be/en/workshops.md)

## Official reference — NIS2 Art. 21(2)(b)

> 2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)

> (b) incident handling;
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)(b)

**What this reference concerns:** When something happens, you must be able to detect it, contain it, fix it and learn from it — people, steps and tools decided in advance.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU