4. Cyberresilience and crisis management
Article 1 of the NIS Directive2 states: "This Directive lays down measures aimed at achieving a high common level of cybersecurity throughout the Union, in order to improve the functioning of the internal market. To this end, this Directive lays down obligations for Member States to adopt national cybersecurity strategies, to designate or set up competent authorities, cyber crisis management authorities, cybersecurity single points of contact (hereinafter referred to as "single points of contact") and computer security incident response centers (CSIRTs)".
Article 9 states: "Each Member State shall designate or establish one or more competent authorities responsible for the management of major cybersecurity incidents and crises. Member States shall ensure that these authorities have sufficient resources to carry out their tasks effectively and efficiently. Member...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Cyberresilience and crisis management
Cyber-resilience activities and continuous improvement plan
Bibliography
Standards and norms
- Information security, cybersecurity and privacy protection – Information security management systems – Requirements - ISO/IEC 27001 - 2022
- Information security, cybersecurity and privacy protection – Information security management systems – Requirements. Amendment 1: Action on climate change. - ISO/IEC 27001:2022/Amd 1 - 2024
- Information security, cybersecurity and privacy protection – Information security...
Regulations
(non-exhaustive list)
Directive (EU) 2022/2555 of the European Parliament and of the Council of December 14, 2022 on measures to ensure a common high level of cybersecurity throughout the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (SRI 2 Directive), OJEU L 333 of December 27, 2022.
Treaty on the Functioning of the European...
Directory
Organizations – Federations – Associations (non-exhaustive list)
ANSSI (Agence nationale de la sécurité des systèmes d'information) :
ENISA (European Union Agency for Cybersecurity) or AESRI (Agence de l'Union européenne pour la cybersécurité) :
The Ultimate Scientific and Technical Reference
