National Incident Resolution Unit (national CERT/CSIRT) – special unit with material scope in the
area of cyber security at a national level, subordinated to the Central state authority for cyber security
(also fulfils the tasks of the “computer emergency response team” under Article 7 of the Proposal
for Directive19).
Competences and responsibilities:
•
Systematically monitors the status of security and adherence to security standards in public
administration information systems, continuously informing the Central state authority for
cyber security,
•
Provides and bears responsibility for coordinated incident resolution and/or coordinated
reactions to cyber attacks,
•
Sends early warnings, declares emergencies, announces and spreads information to relevant
interested actors about risks and incidents,
•
Ensures specialized training for incident resolution units and systematically manages training
courses in the area of cyber security within its scope of powers,
•
Ensures the execution of tasks implied by international collaboration within its
scope of powers,
•
Builds wide public awareness of the risks connected to activities performed on-line and
organizes campaigns in the area of network and information security,
•
Executes tasks of the incident resolution unit for certain material areas and/or on the basis of
an authorization from a relevant central state administration authority.
Sector oriented authority for cyber security – organizational unit of existing central state
authorities. Provides for cyber security within its material scope.
Competences and responsibilities:
•
Responsible for the execution of state policies in the area of cyber security within its
scope of powers,
•
Ensures the exercise of state administration in the area of cyber security within its
scope of powers,
•
Provides collaboration to the Central state administration authority for cyber security when
forming state policies in the area of cyber security,
•
Cooperates with other sector oriented authorities for cyber security,
•
Performs supervision over the activities of the sector oriented incident resolution unit,
•
Ensures an increase in the level of security awareness and coordinates collaboration at all
levels of cyber security control within its scope of powers.
Incident resolution unit (government CERT/CSIRT, CERT/CSIRT XY) – special unit of a central
state administration authority – authority with material relevance of cyber security. The physical
establishment of sectoral units in all sectors of administration is not foreseen. However, the
following functionalities must be implemented in individual sectors of administration.20
13
20 The conditions of establishing of incident resolution units and the scope of their authority, competences and duties, will be set by the Cyber
Security Act.