---
title: "Recognize that cyber incidents trigger mandatory legal obligations, and legal counsel should be part of the incident response team from the first moment."
impact: HIGH
impactDescription: "significant quality or reliability improvement"
tags: cybersecurity-compliance, legal, nis2, dora, sec-cybersecurity-rules
---

## Recognize that cyber incidents trigger mandatory legal obligations, and legal counsel should be part of the incident response team from the first moment.

Delaying legal involvement can result in missed notification deadlines, waived privilege, and increased liability.