+Article 15 3.

Article 15 3.

The CSIRTs network shall have the following tasks:

(a) 

to exchange information about the CSIRTs’ capabilities;

(b) 

to facilitate the sharing, transfer and exchange of technology and relevant measures, policies, tools, processes, best practices and frameworks among the CSIRTs;

(c) 

to exchange relevant information about incidents, near misses, cyber threats, risks and vulnerabilities;

(d) 

to exchange information with regard to cybersecurity publications and recommendations;

(e) 

to ensure interoperability with regard to information-sharing specifications and protocols;

(f) 

at the request of a member of the CSIRTs network potentially affected by an incident, to exchange and discuss information in relation to that incident and associated cyber threats, risks and vulnerabilities;

(g) 

at the request of a member of the CSIRTs network, to discuss and, where possible, implement a coordinated response to an incident that has been identified within the jurisdiction of that Member State;

(h) 

to provide Member States with assistance in addressing cross-border incidents pursuant to this Directive;

(i) 

to cooperate, exchange best practices and provide assistance to the CSIRTs designated as coordinators pursuant to Article 12(1) with regard to the management of the coordinated disclosure of vulnerabilities which could have a significant impact on entities in more than one Member State;

(j) 

to discuss and identify further forms of operational cooperation, including in relation to:

(i) 

categories of cyber threats and incidents;

(ii) 

early warnings;

(iii) 

mutual assistance;

(iv) 

principles and arrangements for coordination in response to cross-border risks and incidents;

(v) 

contribution to the national large-scale cybersecurity incident and crisis response plan referred to in Article 9(4) at the request of a Member State;

(k) 

to inform the Cooperation Group of its activities and of the further forms of operational cooperation discussed pursuant to point (j), and, where necessary, request guidance in that regard;

(l) 

to take stock of cybersecurity exercises, including those organised by ENISA;

(m) 

at the request of an individual CSIRT, to discuss the capabilities and preparedness of that CSIRT;

(n) 

to cooperate and exchange information with regional and Union-level Security Operations Centres (SOCs) in order to improve common situational awareness on incidents and cyber threats across the Union;

(o) 

where relevant, to discuss the peer-review reports referred to in Article 19(9);

(p) 

to provide guidelines in order to facilitate the convergence of operational practices with regard to the application of the provisions of this Article concerning operational cooperation.

1. Oversigt

,

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede standarder

2. Identificerede krav

Krav

3. Relaterede standarder

Standarder