19.9.2017 EN Official Journal of the European Union L 239/47 Public communications: — Agree upon public messages regarding the incident. — If the crisis entails an external or Common Security and Defence Policy (CSDP) dimension, the public communi­ cation should be coordinated with the EEAS and the HRVP Spokesperson service. Cooperation at the strategic/political level Potential actors — For Member States, Ministers responsible for cybersecurity — For the European Council, the President — For the Council, the rotating Presidency — When measures within the ‘Cyber Diplomatic Toolbox’, PSC and Horizontal Working Party — For the European Commission, the President or the delegated Vice-President/Commissioner — The High Representative of the Union for Foreign Affairs Security Policy/Vice-President of the Commission. Scope of activities: Strategic and political management of both cyber and non-cyber aspects of the crisis including measures under the Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities. Shared situational awareness: — Identify the impacts of the disruptions caused by the crisis on the functioning of the Union. Response: — Activate additional crisis management mechanisms/instruments depending on the nature and impact of the incident. These may include, for example, the Civil Protection Mechanism. — Take measures within the Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities. — Make available emergency support to affected Member States for example activating the Cybersecurity Emergency Response Fund (1) once applicable. — Cooperation and Coordination with international organisations where appropriate such as the United Nations (UN), the Organisation for Security and Cooperation in Europe (OSCE) and particularly NATO. — Assess national security and defence implications. Public communications: Decide upon a common communication strategy towards the public. COORDINATED RESPONSE WITH MEMBER STATES AT THE EU LEVEL IN THE FRAMEWORK OF THE IPCR ARRANGEMENTS Following the principle of complementarity at EU level, this section introduces and focuses in particular on the core objective and the responsibilities and activities of the Member States Authorities, the CSIRTs Network, ENISA, CERT-EU, Europol/EC3, INTCEN, the EU Hybrid Fusion Cell and the Council Horizontal Working Party on Cyber issues within the IPCR process. Actors are assumed to act in line with established procedures at EU or national level. It is essential to note that, as illustrated by Figure 1, irrespective of the activation of the EU crisis management mechanisms, activities at national level as well as cooperation within the CSIRTs Network (where necessary) take place throughout any incident/crisis following the principles of subsidiarity and proportionality. (1) The Cybersecurity Emergency Fund is a proposed action under the Joint Communication ‘Resilience, Deterrence and Defence: Building strong cybersecurity for the EU’, JOIN(2017) 450/1.

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents