d) Resilience and continuity TM11 Reinforcing resilience and continuity plans Ensure that MNOs reinforce their resilience and continuity plans. MNOs should ensure they have adequate plans in place in case of disaster affecting the ongoing operation of their network, and ensure any critical dependencies are mapped and mitigated as required. MNOs should request similar arrangements within their suppliers and only use suppliers who demonstrate sufficient levels of long-term resilience. R7 R8  Relevant authorities  Operators  Suppliers  Critical infrastructure operators SA07, SA08, SA10 SUPPORTING ACTIONS a) Network security Id Supporting action Description SA01 Reviewing or developing guidelines and best practices on network security SA02 Reinforcing testing and auditing capabilities at national and EU level Update the existing technical guidance on security measures for telecom providers based on Article 13a of the EU telecom framework directive and align it with Article 40 of the European Electronic Communications Code (EECC), taking also into account the need to develop best practices as regards new technologies and developments, such as Network Function Virtualisation (NFV). Reinforce competences, testing and auditing capabilities at national and/or EU level and, in particular: - Support the development of expertise of Information systems security audit service providers in telecom security audits through capacity building and EU investment in training; - The Commission should consider including into the Union Rolling Work Programme the development of an EU certification scheme for cybersecurity audit service providers in particular to support the development of capability for in-depth technical audits and security evaluations in co-operation between MS and facilitate sharing information on benchmarks of certified audit service providers. Union level framework for technical audits and security evaluation will give better position to require security from suppliers. Relevant actors Related measure(s)  Relevant authorities  ENISA  Operators SM01, TM01, TM04  Relevant authorities  EC  ENISA SM02, TM07, TM08, TM09, TM10 27