Member

On the question of the impact assessment addressed in Amendment 172, the impact assessment is indeed very important, as is the consultation with industry that we have undertaken to date. The incident reporting requirements have been carefully designed with the impacts on regulated entities in mind, which is why we have chosen to adopt the two-stage reporting incident requirement outlined in the Bill over multi-stage reporting adopted in NIS2, and why we have taken a proportionate approach to expanding the range of reportable incidents that need to be reported. The cost implications of these measures are already quantified in our impact assessment for the Bill.