RJCS · Articles 40 to 44
Notification of incidents: decide and act within the deadline
The notification is not an isolated act. It requires detection, assessment of significance, registration of the time of decision, updates and production of a sustained final report.
For whom
When this article must enter into the plan.
Entities subject to mandatory notification of significant incidents, considering the applicable criteria and rules.
Brief tutorial
Four steps to start with method.
Adapt the depth, the responsible and the evidence to the concrete framework of the entity.
- 01
Detect and log
Open the incident, preserve time, origin, affected systems, known impact and initial actions.
- 02
Evaluate significance
Apply documented criteria, involve guardians and register when the entity has concluded that there is or may be significant incident.
- 03
Notify and update
Prepare the initial notification and updates required without compromising mitigation or resolution.
- 04
Close and learn
Report the end of impact, produce the final report, identify causes and monitor corrective actions.
Proof
Evidence to prepare.
- Chronological log of the incident
- Significance assessment
- Receipts and content of notifications
- Final report and corrective plan
Warning
Errors that weaken implementation.
- Start counting without registering the relevant event
- Wait for total certainty before evaluating
- Notify without coordination between technique, management and communication
Quick control
Initial checklist.
- Clock of the registered incident
- Criteria applied
- Scaled officers
- Preserved notifications
- Lessons Accompanied
Frequently Asked Questions
Two key answers.
Is there only one notification?
No. The RJCS provides for a sequence that may include initial notification, update, end of significant impact and final report.
Is the deadline always counted from the technical detection?
Relevant moments vary. The organization shall record detection, assessment, conclusion on significance and end of impact to correctly apply each deadline.
Primary source
Decree-Law No. 125/2025 of 4 December
Information tutorial. Always confirm the official text, the applicable regulations and the specific framework of the organization.