19.9.2017 EN Official Journal of the European Union L 239/45 — Member States' CSIRTs coordinate their technical response activities with the assistance of ENISA and the Commission. — EEAS SIAC: On behalf of INTCEN, the EU Hybrid Fusion Cell sets the collection process to gather initial evidence in motion. Public communications: — CSIRTs produce technical advisories (1) and vulnerability alerts (2) and disseminate them to their respective communities and the public following the authorisation procedures applicable in each case. — ENISA facilitates the production and dissemination of common CSIRTs Network communications. — ENISA coordinates its public communication activities with the CSIRTs Network and the Commission's Spokesperson service. — ENISA and EC3 coordinate their public communication activities based on the shared situational awareness agreed among Member States. They both coordinated their public communication activities with the Commission's Spokesperson service. — If the crisis entails an external or Common Security and Defence Policy (CSDP) dimension, the public communi­ cation should be coordinated with the EEAS and the HRVP Spokesperson service. Cooperation at the operational level Scope of activities: — Preparing decision-making at the political level — Coordinate the management of the cybersecurity crisis (as appropriate) — Assess the consequences and impact at EU level and propose possible mitigating actions. Potential actors — Member States: — Competent authorities and single points of contact established by the NIS Directive — CSIRTs, cybersecurity agencies — Other national sectoral authorities (in case of multi-sectoral incident or crisis) — EU bodies/offices/agencies — ENISA — Europol/EC3 — CERT-EU — European Commission — the (Deputy) Secretary-General SG (ARGUS process) — DG CNECT/HOME — Commission Security Authority — Other DGs (in case of multi-sectoral incident or crisis) (1) Advice of technical nature as to the causes of the incident and possible mitigations. (2) Information about the technical vulnerability which is being exploited to negatively impact IT systems.