(3)
Mitigation and recovery: to reinforce EU defence mechanisms for CII;
(4)
International cooperation: to promote EU priorities internationally;
(5)
Criteria for the ICT sector: to support the implementation of the Directive on
the Identification and Designation of European Critical Infrastructures26.
5.
THE ACTION PLAN
5.1.
Preparedness and prevention
Baseline of capabilities and services for pan-European cooperation. The Commission invites
Member States and concerned stakeholders to
• define, with the support of ENISA, a minimum level of capabilities and services for
National/Governmental CERTs and incident response operations in support to panEuropean cooperation.
• make sure National/Governmental CERTs act as the key component of national capability
for preparedness, information sharing, coordination and response.
Target: end of 2010 for agreeing on minimum standards; end of 2011 for establishing well
functioning National/Governmental CERTs in all Member States.
European Public Private Partnership for Resilience (EP3R). The Commission will
• foster the cooperation between the public and the private sector on security and resilience
objectives, baseline requirements, good policy practices and measures. The primary focus
of the EP3R would be on the European dimension from strategic (e.g. good policy
practices) and tactical/operational (e.g. industrial deployment) perspectives. EP3R should
build upon and complement existing national initiatives and the operational activities of
ENISA.
Target: end of 2009 for a roadmap and plan for EP3R; mid of 2010 for establishing EP3R;
end of 2010 for EP3R to produce its first results.
European Forum for information sharing between Member States. The Commission will
• establish a European Forum for Member States to share information and good policy
practices on security and resilience of CIIs. This would benefit from the results of the
activities of other organisations, in particular ENISA.
Target: end of 2009 for launching the Forum; end of 2010 for delivering the first results.
5.2.
Detection and response
European Information Sharing and Alert System (EISAS). The Commission supports
26
EN
Council Directive 2008/114/EC
8
EN