TheDarkMist

Drafts NIS2 incident reports for a small WordPress agency or freelancer, especially one acting as supply chain to a regulated client rather than as a regulated entity itself. Use this skill whenever someone needs to draft or produce a NIS2 incident notification: a 24-hour early warning, a 72-hour notification, a 30-day final or progress report, or a user-protection notice, after a security incident such as a breach, intrusion, malware, defacement, prolonged downtime, or data exposure on a WordPress site or on a client they support. Trigger it whenever the conversation mentions NIS2 reporting duties, CSIRT or authority notification, the 24h/72h/30-day deadlines, supply-chain reporting obligations, or "what and when do I have to report after we got hacked". It produces first drafts only: a human reviews, edits, and sends.