In order to improve the protection of CSDP communication networks, the MDR, EUMS, CMPD and CPCC, in cooperation with INTCEN, will: • Strengthen IT security capacity within the EEAS, based on existing technical capability and procedures, with a focus on prevention, detection, incident response, situational awareness, information exchange and early warning mechanism. A cooperation strategy with the CERT-EU and existing EU cyber security capabilities shall also be developed or, where available, further enhanced; • Develop coherent IT security policy and guidelines, also taking into account technical requirements for cyber defence in a CSDP context for structures, missions and operations, bearing in mind existing cooperation frameworks and policies within the EU to achieve convergence in rules, policies and organisation; • Building upon existing structures, strengthen cyber threat assessment and intelligence capability to identify new cyber risks and provide regular risk assessments based on the strategic threat assessment and near real-time incident information coordinated between relevant EU structures and made accessible at different classification levels; • Promote real-time cyber threat information sharing between Member States and relevant EU entities. For this purpose, information sharing mechanisms and trust-building measures shall be developed between relevant national and European authorities, through a voluntary approach that builds on existing cooperation; • Develop and integrate into strategic level planning, a unified cyber defence concept for CSDP military operations 3 and civilian missions; • Enhance cyber defence coordination to implement objectives related to the protection of networks used by EU institutional actors supporting CSDP, drawing on existing EU-wide experiences; • Review regularly resource requirements and other relevant policy decisions based on the changing threat environment, in consultation with the relevant Council working groups and other EU institutions; 3 In the case of military operations, the current EU Concept for Cyber Defence for EU-led Military Operations should be updated in the light of this Policy Framework. 15585/14 ANNEX FP/oza DG C 2B 7 EN