Art. 14(9)

Deception-impact severe incidents (primary mapping: Art. 14(3)) include scenarios where investigation continuity may justify delayed dissemination; (14)(9) provides the legal-grounds framework.

Disruption severe incidents (primary mapping: Art. 14(3)) may involve ongoing exploitation where premature notification could escalate impact; (14)(9)'s delay-grounds delegated acts are the governing instrument.

Denial severe incidents (primary mapping: Art. 14(3)) may justify delayed notification while attacker activity is still active on other potentially-affected products; (14)(9) governs.

Degradation severe incidents (primary mapping: Art. 14(3)) may warrant delayed dissemination during ongoing forensic analysis of root cause; (14)(9) is the applicable delegated-acts framework.

Destruction severe incidents (primary mapping: Art. 14(3)) may involve sensitive attribution information whose immediate release could compromise investigation; (14)(9)'s delay-grounds framework applies.

Theft severe incidents (primary mapping: Art. 14(3)) may justify delayed dissemination to avoid further compromise of stolen-data scope or to coordinate with law enforcement; (14)(9) governs.

Known-vulnerability reconnaissance (primary mapping: Art. 14(1)) is a scenario where premature dissemination of notification could weaponize a still-unpatched vulnerability; (14)(9)'s delegated-acts on cybersecurity-grounds for delaying dissemination directly govern this case.