[FINAL] CONTENTS 1. Contact details 3 2. Executive summary 4 3. Essential services 6 4. National framework 7 5. Security requirements for operators of essential services 9 6. Incident reporting for operators of essential services 11 7. Digital service providers (DSP) 13 8. Penalty regime 15 Annex 1 - Table of essential services and identification thresholds 18 Annex 2 - Updated list of proposed Competent Authorities 27 Annex 3 - Proposed high level security principles 29 Page 2

Select target paragraph3