China’s is even more stringent at 4 hours, down to 1 hour for high-severity incidents:
https://www.theregister.com/2025/09/16/china_1hour_cyber_rep...
https://privacymatters.dlapiper.com/2025/09/china-new-strict...
I am very impressed by those who can assess the scope and consequences within 4 hours, let alone 1 hour.
I am very impressed by those who can assess the scope and consequences within 4 hours, let alone 1 hour.