L 239/46
EN
Official Journal of the European Union
19.9.2017
— EEAS
— the (Deputy) Secretary-General for Crisis Response and SIAC (EU INTCEN and EUMS INT)
— EU Hybrid Fusion Cell
— Council
— the Presidency (Chair Horizontal Working Party on Cyber Issues or Coreper (1)) supported by the GSC, or PSC (2)
and — if activated — with the support of the IPCR arrangements.
Situational awareness:
— Support the production of politico/strategic situation reports (e.g. the ISAA in case of IPCR activation)
— The Council Horizontal Working Party on Cyber Issues prepares the Coreper or PSC meeting as appropriate
— In case of IPCR activation:
— The Presidency may call round table meetings to support its preparation for Coreper or PSC, bringing in relevant
stakeholders in the Member States, the institutions, the agencies, and third parties such as non-EU countries and
international organisations. These are crisis meetings to identify bottlenecks and produce proposals for action for
cross-cutting issues.
— The Commission lead service or the EEAS as ISAA lead prepares the ISAA report with contributions from ENISA,
CSIRTs Network, Europol/EC3, EUMS INT, INTCEN and all other relevant actors. The ISAA report represents an
EU-wide assessment based on correlation of technical incidents and crisis assessment (threat analysis, risk
assessment, non-technical consequences and effects, non-cyber aspects of the incident or crisis, etc.) which is
tailored to the needs of operational and political levels.
— In case of ARGUS activation
— CERT-EU and EC3 (3) contribute directly to the exchange of information within the Commission.
— In case of the EEAS Crisis Response Mechanism activation:
— The SIAC will intensify its information collection and aggregate the all-source information and prepare an
analysis and assessment on the incident.
Response (upon request from the political level):
— Cross-border cooperation with single points of contact and national competent authorities (NIS Directive) to mitigate
the consequences and effects.
— Activate all technical mitigation measures and coordinate technical capacities needed to stop or reduce the impact of
the attacks on the targeted information systems.
— Cooperation and, if decided, coordination of technical capacities towards a joint or collaborative response in
accordance with the CSIRTs Network SOPs.
— Assess the need to cooperate with relevant third parties.
— (where activated) Decision-making within the ARGUS process.
— (where activated) Preparing decisions and coordinating under the IPCR arrangements.
— (where activated) support EEAS decision-making through the EEAS Crisis Response Mechanism including as regards
contacts with third countries and international organisations as well as any measure aimed at protecting CSDP
missions and operations and EU delegations.
(1) The Permanent Representatives Committee or Coreper (Article 240 of the Treaty on the Functioning of the European Union — TFEU) is
responsible for preparing the work of the Council of the European Union.
(2) The Political and Security Committee is a Committee of the Council of the European Union dealing with the common foreign and
security policy (CFSP) mentioned in Article 38 of the Treaty on European Union.
(3) In accordance and under the conditions and procedures set in EC3's legal framework.
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents