Network Security Agency (ENISA) of breaches of security of networks and services and of
breaches of network integrity.
(4) Where the Agency believes that disclosure of a breach referred to in the preceding
paragraph is in the public interest, it may inform the public or require the undertaking to
which the breach of security and integrity relates to do so.
(5) The Agency shall submit to the Commission and ENISA a summary annual report on the
notifications received and the measures taken in accordance with the first, second or third
paragraphs of this Article no later than by the end of February for the preceding year.
Article 82
(security audit)
(1) At the request of the Agency, undertakings must submit to a security audit carried out by
a qualified independent body, which shall send the results of the audit to the Agency and
audited undertaking, retaining the level of confidentiality referred to in Article 79 of this Act.
The costs of this audit shall be borne by the undertaking.
(2) The undertaking must, for the purposes of implementation of the audit referred to in the
preceding paragraph, choose from among one of the independent audit organisations
registered with the Slovenian Auditing Institute, and notify the Agency of the audit
organisation chosen and of the commencement of the audit procedure within 30 days of the
Agency making the request referred to in the preceding paragraph.
(3) Where an undertaking does not act in accordance with the preceding paragraph, the
Agency shall appoint an independent audit organisation registered with the Slovenian
Auditing Institute to conduct the audit referred to in the first paragraph of this Article. The
costs of the audit shall be borne by the audited undertaking.
Article 83
(measures in the event of emergency situations)
(1) In the event of the occurrence of an emergency situation, an undertaking must give
precedence to securing the operation of those parts of the network required for the continuity
of operation of the networks of entities responsible for the security and defence system and
the protection and rescue system. Undertakings must, as required, envisage alternative routes
to ensure that network breakdowns are as short as possible. To this end, these measures must
be coordinated in advance with the entities responsible for the security and defence system
and the protection and rescue system.
(2) Undertakings providing public telephone networks must adjust their networks so as to
give priority to communications from certain network termination points over
communications from other network termination points (hereinafter: priority function).
Communications given a priority function in the public telephone network of an individual
undertaking shall also retain that priority in the public telephone networks of other
undertakings. In emergency situations, undertakings may also give priority to the operation of
network termination points so as to restrict or interrupt the operation of other telephone
connections.
(3) The Government shall, by decree, determine those groups of users with the right to
priority network termination points under the preceding paragraph.
(4) The Government shall, by resolution, also determine other measures and restrictions or
interruptions of operations connected with the provision of public communications networks
or services in the event of a natural or other disaster or a catastrophic network breakdown, if
this is necessary to rectify the situation that has arisen.