[360] 21
(3) A notification made under paragraph (1) shall, to the extent to which the
operator concerned may reasonably be expected to have such information, contain the following information:
(a) the operator’s name;
(b) the category of sector and, where appropriate, subsector and the
essential service provided by it which is affected by the incident;
(c) the time the incident occurred;
(d) the duration of the incident;
(e) information concerning the nature and impact of the incident;
(f) information concerning any or any likely cross-border impact of the
incident;
(g) any other information that may be of assistance to the CSIRT.
(4) In determining whether, in relation to an incident affecting an essential
service provided by an operator of essential services and in respect of which the
operator is designated as an operator of essential services, the incident has a
significant impact on the continuity of the essential service, the following in
particular shall be taken into account:
(a) the number of users affected by the disruption of the essential service;
(b) the duration of the incident;
(c) the geographical spread of the area affected by the incident.
(5) The CSIRT shall without delay furnish a copy of a notification made to it
under paragraph (1) to the single point of contact and the competent authority
referred to in Regulation 7(1) and, where the notification relates to an incident
in a sector referred to in Regulation 7(2), a copy of the notification shall also
be furnished without delay to the competent authority referred to in that
Regulation.
(6) (a) The CSIRT shall, where it is satisfied that an incident notified to it
may have a significant impact on the continuity of the provision of an
essential service in another member state having regard to the matters
referred to in paragraph (4), inform the single point of contact in the
other member state of the incident and may request the single point
of contact to forward the notification made under paragraph (1) to
the single point of contact in the other member state.
(b) Where requested to do so by the CSIRT or a competent authority,
the single point of contact shall send the notification to the single
point of contact in the other member state.
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents