N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V 3. P R E PA R E D N E S S , R E S P O N S E A N D R E C OV E RY M E A S U R E S 3.1 PRESENTATION OF THE CYBER EMERGENCY RESPONSE PLAN As soon as it becomes aware of a cyber incident, the Cyber Risk Assessment Unit (CERC) is alerted and carries out an assessment of the available information. If the incident is likely to have a significant impact, the High Commissioner for National Protection is alerted and informs the Prime Minister, Minister of State, who decides whether to activate the Crisis Unit. Cyber emergency refers to a situation caused by an incident or an attack that could lead to a major malfunction or even unavailability of communication and information processing systems that threatens the vital interests or essential needs of all or part of the country or the population of the Grand Duchy of Luxembourg. In principle, crisis management bodies become aware of a cyber incident or attack either through the analysis of information available at the national level or through international channels following existing agreements. The Crisis Unit may delegate to an operational unit, in particular the execution, implementation and monitoring of the measures and activities ordered. In the cyber context, the functions of the Operational Unit are generally assumed by the Cyber Risk Assessment Unit (CERC). 25