12 [360] designated as the computer security incident response team in the State in respect of the sectors set out in Schedule 1 and the services set out in Schedule 2. (2) The CSIRT is responsible for risk and incident handling in accordance with a well-defined process in respect of the sectors set out in Schedule 1 and the services set out in Schedule 2 and, for that purpose, shall— (a) monitor incidents within the State, (b) provide early warnings, alerts, announcements and dissemination of information about risk and incidents to relevant stakeholders, (c) respond to incidents notified to it under Regulation 18 or 22, (d) provide dynamic risk and incident analysis and situational awareness, (e) participate and co-operate in the CSIRTs network, (f) establish relationships with persons in the private sector to facilitate co-operation with that sector, (g) for the purpose of facilitating co-operation, promote the adoption and use of common or standardised practices for— (i) incident and risk handling procedures, and (ii) incident, risk and information classification schemes, and (h) co-operate with a competent authority and the single point of contact in accordance with these Regulations. (3) For the purpose of performing its functions under these Regulations, the CSIRT shall ensure that— (a) there is a high level of availability of its communications services by avoiding single points of failure and that there are several means by which it can be contacted by, and can make contact with, others, (b) communications channels are clearly specified and well known to constituency and cooperative partners, (c) its premises and supporting information systems are located in secure sites, and (d) in relation to business continuity— (i) it is equipped with an appropriate system for managing and routing requests in order to facilitate handovers,

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents