the development and deployment of EISAS, reaching out to citizens and SMEs and being based on national and private sector information and alert sharing systems. The Commission financially supports two complementary prototyping projects.27 ENISA is called upon to take stock of the results of these projects and other national initiatives and produce a roadmap to further the development and deployment of EISAS. Target: end of 2010 for completing the prototyping projects; end of 2010 for the roadmap towards a European- system. 5.3. Mitigation and recovery National contingency planning and exercises. The Commission invites Member States to • develop national contingency plans and organise regular exercises for large scale networks security incident response and disaster recovery, as a step towards closer pan-European coordination. National/Governmental CERTs/CSIRTs may be tasked to lead national contingency planning exercises and testing, involving private and public sector stakeholders. The involvement of ENISA is called upon to support the exchange of good practices between Member States. Target: end of 2010 for running at least one national exercise in every Member State. Pan-European exercises on large-scale network security incidents. The Commission will • financially support the development of pan-European exercises on Internet security incidents,28 which may also constitute the operational platform for pan-European participation in international network security incidents exercises, like the US Cyber Storm. Target: end of 2010 for the design and run of the first pan-European exercise; end of 2010 for pan-European participation in international exercises. Reinforced cooperation between National/Governmental CERTs. The Commission invites Member States to • strengthen the cooperation between National/Governmental CERTs, also by leveraging and expanding existing cooperation mechanisms like the EGC.29 The active role of ENISA is called upon to stimulate and support pan-European cooperation between National/Governmental CERTs that should lead to enhanced preparedness; reinforced European capacity to react and respond to incidents; pan-European (and/or regional) exercises. Target: end of 2010 for doubling the number of national bodies participating in ECG; end of 2010 for ENISA to develop reference materials to support pan-European cooperation. 27 28 29 EN Under the EC Programme "Prevention, Preparedness and Consequence Management of terrorism and other Security Related Risks" http://ec.europa.eu/justice_home/funding/cips/funding_cips_en.htm Supra 27 Supra 24 9 EN

Select target paragraph3