Art. 14(4)

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (6)

IMP-0001 Deception (or Misdirection)ST0009
addresses
moderate
direct
Deception-impact severe-incident notification (primary mapping: Art. 14(3)) cascades to (14)(4)'s 24h/72h/1mo timing schedule for severe incidents.
IMP-0002 DisruptionST0009
addresses
high
direct
Disruption severe-incident notification (primary mapping: Art. 14(3)) cascades to (14)(4)'s notification timing schedule.
IMP-0003 DenialST0009
addresses
high
direct
Denial severe-incident notification (primary mapping: Art. 14(3)) cascades to (14)(4)'s timing schedule.
IMP-0004 DegradationST0009
addresses
moderate
direct
Degradation severe-incident notification (primary mapping: Art. 14(3)) cascades to (14)(4)'s timing schedule for the persistent-availability-impact case.
IMP-0005 DestructionST0009
addresses
moderate
direct
Destruction severe-incident notification (primary mapping: Art. 14(3)) cascades to (14)(4)'s timing schedule — destruction is the most severe availability/integrity case.
IMP-0006 TheftST0009
addresses
high
direct
Theft severe-incident notification (primary mapping: Art. 14(3)) cascades to (14)(4)'s timing schedule for the confidentiality-impact case.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.