22 Cyber Incident Classification in the OSCE Region • For members of the EU, relevant guidance can be. found in the NIS Directive and national sectorial regulations. • The French severity scale to classify cyberattacks was developed within the framework of the strategic review of cyber defense published in 2018. Incorporating national and international legal standards, it is built both as a decision-making tool for authorities and a support for international co-operation.