4. Cyberresilience and crisis management

Article 1 of the NIS Directive2 states: "This Directive lays down measures aimed at achieving a high common level of cybersecurity throughout the Union, in order to improve the functioning of the internal market. To this end, this Directive lays down obligations for Member States to adopt national cybersecurity strategies, to designate or set up competent authorities, cyber crisis management authorities, cybersecurity single points of contact (hereinafter referred to as "single points of contact") and computer security incident response centers (CSIRTs)".

Article 9 states: "Each Member State shall designate or establish one or more competent authorities responsible for the management of major cybersecurity incidents and crises. Member States shall ensure that these authorities have sufficient resources to carry out their tasks effectively and efficiently. Member...