A Point of Contact (PoC) is a designated person or role that coordinates communication on a particular subject. In NIS-related work, the PoC may help route security notifications, share information with relevant authorities or teams, and coordinate internal responses. The exact responsibilities depend on the organization and applicable requirements.
A clear PoC matters because delays or unclear handoffs can hinder incident response and compliance. Organizations should define who covers the role, how the PoC can be reached, and how responsibilities connect with security teams, senior leadership, and the Data Protection Officer. NIS and GDPR processes may intersect during an incident, but they have distinct obligations; coordinated workflows can prevent missed notifications without creating duplicate or confusing records.