22 [360] (7) Where possible, the CSIRT shall provide an operator of essential services who has made a notification under this Regulation with information in relation to dealing with the incident to which the notification relates, including information that may assist the operator in effective incident handling. (8) After consulting with the operator of essential services to whom a notification under paragraph (1) relates and, where the notification relates to an incident in a sector referred to in Regulation 7(2) with the competent authority referred to in that Regulation, the CSIRT may inform the public about the incident to which the notification relates where the CSIRT considers that public awareness is necessary to deal with the incident insofar as it relates to the operator of essential services concerned or to prevent the same or a similar incident occurring in respect of other operators of essential services who the CSIRT considers may be at risk of such an incident having regard to the nature of the incident and the network and information systems of those other operators. (9) An operator of essential services that has made a notification under paragraph (1) shall notify the CSIRT in accordance with paragraph (10) when the incident has been resolved. (10) A notification under paragraph (9) shall be made as soon as practicable after the incident has been resolved and, in any event, not later than 72 hours after that time. (11) The CSIRT shall without delay furnish a copy of a notification made under paragraph (9) to a person to whom a copy of the notification made under paragraph (1) was furnished under paragraph (5). (12) The CSIRT shall without delay forward a copy of any correspondence between it and an operator of essential services in relation to an incident notified to it under paragraph (1) to— (a) the competent authority referred to in Regulation 7(1), and (b) where the incident relates to a sector referred to in Regulation 7(2), the competent authority referred to in that Regulation. (13) A notification made under this Regulation shall be in such form and manner as the competent authority referred to in Regulation 7(1) shall determine. (14) An operator of essential services commits an offence where it does not notify the CSIRT in accordance with paragraph (1) or (9). (15) In a prosecution for an offence under paragraph (14) it shall be a defence for an operator of essential services to show— (a) that the operator took all reasonable steps to notify the CSIRT in accordance with paragraph (1) or (9), as the case may be, or