3. For the purposes of paragraph 1 of this Article, the Commission shall ensure that a risk and threat analysis is performed for the governmental infrastructure referred to in Article 5(2). On the basis of that analysis, it shall determine, by means of implementing acts, the general security requirements. In doing so, the Commission shall take account of the impact of those requirements on the smooth functioning of the governmental infrastructure, in particular in terms of cost, risk management and schedule, and shall ensure that the general level of security is not reduced, the functioning of the equipment is not undermined and the cybersecurity risks are taken into account. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 47(3).