13.1.1 For the purpose of Article 21(2)(c) of Directive (EU) 2022/2555, the relevant entities shall …

Requirement

For the purpose of Article 21(2)(c) of Directive (EU) 2022/2555, the relevant entities shall prevent loss, damage or compromise of network and information systems or interruption to their operations due to the failure and disruption of supporting utilities.

Guidance

• Consider supporting utilities, where relevant (107), that ensure the continuous operation of network and information systems, such as (indicative, non-exhaustive list):
  • power supply – electricity to keep systems running;
  • water for cooling and other operational needs;
  • gas for heating or backup power generation;
  • HVAC to maintain optimal operating conditions;
  • telecommunications – internet and network connectivity.
• Include the potential failure and disruption of supporting utilities in the risk assessment.

Examples of evidence

• List of supporting utilities and associated risk assessment results.
• Measures to protect against the failure and disruption of supporting utilities.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -