This tool is an informative aid and does not replace legal advice or official guidance. Deadlines follow Art. 65 to 71 of the Cybersecurity Regulation. Check the significance criteria in Art. 59 to 62 before reporting.
Tools
Incident reporting deadline calculator
Deadlines under the Croatian Cybersecurity Act do not add up and do not run one after another. Enter the moment of awareness and the tool computes all five notifications with exact date and time.
Deadlines run from awareness, not from when the incident occurred and not from when the investigation ends.
If already sent, enter it. The final report deadline runs from it. Leave blank and it is computed from the 72-hour deadline.
The tool runs entirely in your browser. Nothing you enter reaches our server.
Your deadlines
Calculated from the moment of awarenessNotifications are submitted through the PiXi platform (pixi.carnet.hr), accessed via the national identification system. If the platform is unavailable, the notification is sent by form to the competent CSIRT and entered into the platform afterwards. CSIRT competence follows the sector, under Annex III of the Act.
Summary copied
Not sure where you stand?
Half an hour of conversation, with no obligation. By the end you know what needs doing and in what order.