Skip to content

NIS2 Milestones

CasePack provides opt-in NIS2 incident reporting milestones. When enabled on an incident, three regulatory deadlines are tracked automatically. This feature helps MSPs demonstrate compliance with NIS2 notification requirements.

NIS2 (Network and Information Security Directive 2) requires organizations to report significant incidents within defined timeframes. CasePack tracks three milestones:

MilestoneDeadlinePurpose
Early Warning24 hoursInitial notification to competent authority
Full Notification72 hoursDetailed status update with initial assessment
Final Report30 daysComplete incident documentation and analysis

Deadlines are calculated from the incident’s creation timestamp.

NIS2 milestone tracking is opt-in per incident — not all incidents need regulatory reporting.

  1. Open the incident detail page
  2. Click the ⋯ (More actions) menu
  3. Select “Enable NIS2 Reporting”
  4. Three milestones are created immediately

The “Enable NIS2 Reporting” action is only available when the nis2Timeline feature is included in your plan. See Licensing & Access States.

Each milestone can be in one of three states:

StatusDescription
PendingDeadline has not passed, milestone not yet completed
CompletedMarked as done by a user
OverdueDeadline has passed without completion
  1. Open the incident’s Milestones tab
  2. Click “Complete” on a pending milestone
  3. A confirmation dialog appears with a notes field (optional)
  4. The milestone is marked as completed with the current timestamp

Milestones cannot be completed in read-only or export-only subscription states. See Licensing & Access States.

The sidebar shows an Overdue Milestones page link with a badge count of overdue items across all incidents.

The Overdue Milestones page:

  • Lists all overdue milestones across all incidents in the tenant
  • Shows milestone type, incident title, deadline, and how overdue it is
  • Click any row to navigate to the incident detail page

On the incident detail Milestones tab, each milestone shows:

  • Milestone name (Early Warning, Full Notification, Final Report)
  • Deadline — Date and time, with “overdue” badge if past due
  • Status — Pending, Completed, or Overdue
  • Completed at — Timestamp and user who completed it (if applicable)
  • Notes — Optional notes provided on completion
  • Enable NIS2 reporting only for incidents that require regulatory notification
  • Complete the Early Warning milestone first — it has the tightest deadline
  • Add notes when completing milestones to document what was communicated
  • Check the Overdue Milestones page daily to avoid missing deadlines
  • All milestones are included in evidence pack exports