NIS2 gives you 24 hours for an early warning, 72 for a notification and a month for the final report - all counted from when you notice. That makes detection, not legal readiness, the binding constraint.