Actions that make it possible to detect, record, analyse, classify and remove an incident and to limit its effects.
A summary of the definition in Article 2(10) of the National Cybersecurity System Act. The broader concept of incident management also includes looking for links between incidents, removing their causes and drawing lessons (Article 2(18)).1
Sources
- Sejm of the Republic of Poland, Act on the national cybersecurity system, consolidated text, Journal of Laws 2026, item 20, as amended (consolidated text prepared by the Chancellery of the Sejm) (in Polish)
Checked: 3 November 2026