Telecommunications operators must report to the authority any significant information security violations or threats to information security in their services and any other incidents that prevent or significantly interfere with the functioning of communication services.