Operational Guidance for Incident Handling – Rulebooks

Operational guidance for incident handling Traffic Light Protocol (TLP): CLEAR
Version: 1.0 (stable)
Date: 28 September 2026
Authors:
Agence Nationale de la Sécurité des Systèmes d’Information (ANSSI) Commission de Surveillance du Secteur Financier (CSSF) Computer Incident Response Center Luxembourg (CIRCL) Governmental Computer Security Incident Response Team (GovCERT) High Commission for National Protection (HCPN) Institut Luxembourgeois de Régulation (ILR) Disclaimer These rulebooks are solely intended to be used as a practical guidance by an entity facing a cybersecurity incident and looking for immediate assistance from the competent authorities and the Computer Security Incident Response Teams (“CSIRT”). They have been written by a joint team of experts of the High Commission for National Protection (“HCPN”), acting in its role as the Agence Nationale de la Sécurité des Systèmes d’Information (“ANSSI”) and as the Governmental Computer Security Incident Response Team (“GOVCERT.LU”), the Computer Incident Response Center Luxembourg (“CIRCL”), the Commission de Surveillance du Secteur Financier (“CSSF”), and of the Institut Luxembourgeois de Régulation (“ILR”), in the context of 14(5) of the Loi du 5 mai 2026 concernant des mesures destinées à assurer un niveau élevé de cybersécurité (“NIS2 Law”), and in accordance with the missions assigned to the HCPN in its role as ANSSI under Article 3, paragraph 1ter, of the Loi modifiée du 23 juillet 2016 portant création du Haut-Commissariat à la Protection nationale.CIRCL updatesRead More