19.9.2017
EN
Official Journal of the European Union
L 239/51
or issue specific requests for information. The ISAA reports will be tailored to the needs of the political level (i.e.
Coreper or the Council) as defined by the Presidency and laid out in its guidance, thus allowing a strategic overview
of the situation and an informed debate on the agenda items defined by the Presidency. In accordance with the ISAA
SOPs, the nature of the cybersecurity crisis will determine whether the ISAA report is prepared by one of the
Commission Services (DG CNECT, DG HOME) or the EEAS.
Following the activation of the IPCR, the Presidency will outline the specific areas of focus for ISAA in order for it to
support the political coordination and/or decision-making process in the Council. The Presidency will also specify
the timing of the report, following consultations with the Commission services/EEAS.
— Blueprint:
— The ISAA report includes contributions from relevant services including:
— The CSIRTs Network in the form of the EU Cybersecurity Incident Situation Report.
— EC3, Sitroom, the EU Hybrid Fusion Cell, CERT-EU. The EU Hybrid Fusion Cell will support and provide
contributions to the ISAA lead service and the IPCR round table, as appropriate.
— EU sectoral agencies and bodies depending on the impacted sectors
— Member States authorities (other than the CSIRTs).
— Gathering ISAA inputs (1):
— Commission and EU Agencies. The ARGUS IT system will provide the internal backbone network for
ISAA. EU Agencies shall send their contributions to their respective responsible DGs, which in turn will
feed the relevant information into ARGUS. Commission services and Agencies will gather information
from existing sectorial networks with Member States and international organisations and from other
relevant sources.
— For the EEAS. The EU Situation Room supported by the other relevant EEAS departments, will provide
the internal backbone network and single point of contact for ISAA. The EEAS will gather information
from third countries and relevant international organisations.
— Step 6 — Preparation of the informal Presidency round table: the Presidency, assisted by the General Secretariat
of the Council, will define the timing, agenda, participants, and expected outcome (possible deliverables) of the
informal Presidency round table meeting. The GSC will relay relevant information on the IPCR web platform on
behalf of the Presidency, and will issue in particular the meeting's notice.
— Step 7 — Presidency round table/preparatory measures for EU political coordination/decision-making: the
Presidency will gather an informal round table to review the situation, and to prepare and review the items to be
brought to the Coreper or Council's attention. The informal Presidency round table will also be the forum to
develop, review and discuss all proposals for action to be submitted to Coreper/Council.
— Blueprint:
— The Council Horizontal Working Party on Cyber Issues should prepare PSC or Coreper.
— Step 8 — Political coordination and decision-making at Coreper/Council: The results of the Coreper/Council
meetings concern the coordination of response activities at all levels, decisions on exceptional measures, political
declarations, etc. These decisions also constitute an updated political/strategic guidance for the further production of
ISAA reports.
— Blueprint:
— The political decision to coordinate the response to the cybersecurity crisis is implemented through the
activities (performed by the corresponding actors) described above in Section 1 ‘Cooperation at Strategic/po
litical, operational and technical levels’ as regards Response and Public Communication.
— ISAA production continues based on cooperation at technical, operational and political/strategic levels as
regards Situational awareness also described above in Section 1.
(1) ISAA SOPs.
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents