L 239/48
EN
Official Journal of the European Union
19.9.2017
Figure 1
Cybersecurity incident/crisis response at EU level
All of the activities described below are to be carried out in accordance with and following the standard operating
procedures/rules of the cooperation mechanisms involved and in line with the established mandates and competencies
of individual actors and institutions. These procedures/rules may need some additions or modifications in order to
achieve best possible cooperation and effective response to large-scale cybersecurity incidents and crises.
Not all actors presented below may be required to take action during any one particular incident. Nevertheless, the
Blueprint and the relevant standard operating procedures of the cooperation mechanisms should foresee their potential
involvement.
Given the different degree of impact on society that a cybersecurity incident or crisis may have, a high degree of
flexibility as regards the involvement of sectoral actors on all levels and any appropriate response will rely upon both
cyber and non-cyber mitigation activities.
Cybersecurity crisis management — Integrating cybersecurity in the IPCR process
The IPCR arrangements, described in the IPCR SOPs (1), follow sequentially the steps described hereunder (the use of
some of these steps will depend on the situation).
At each step we specify cybersecurity-specific activities and actors. For the reader's convenience, at each step the text
from the IPCR SOPs is provided followed by the Blueprint-specific activities. This step-by-step approach also allows for
clear identification of existing gaps in necessary capabilities and procedures that hamper an effective response to
cybersecurity crises.
Figure 2 (below (2)) is a graphical representation of the IPCR process where the new elements being introduced are
highlighted in blue.
(1) From Document 12607/15 ‘IPCR Standard Operating Procedures’, agreed by Friends of the Presidency group and noted by Coreper in
October 2015.
(2) A larger version of the figure may be found in the appendix.
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents