+REGULATION (EU) 2025/38 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act)
---+CHAPTER I GENERAL PROVISIONS
------+Article 1 Subject-matter and objectives
---------+Article 1 1.
---------+Article 1 2.
---------+Article 1 3.
---------+Article 1 4.
---------+Article 1 5.
---------+Article 1 6.
------+Article 2 Definitions
---+CHAPTER II THE EUROPEAN CYBERSECURITY ALERT SYSTEM
------+Article 3 Establishment of the European Cybersecurity Alert System
---------+Article 3 1.
---------+Article 3 2.
---------+Article 3 3.
------+Article 4 National Cyber Hubs
---------+Article 4 1.
---------+Article 4 2.
---------+Article 4 3.
---------+Article 4 4.
------+Article 5 Cross-Border Cyber Hubs
---------+Article 5 1.
---------+Article 5 2.
---------+Article 5 3.
---------+Article 5 4.
---------+Article 5 5.
---------+Article 5 6.
------+Article 6 Cooperation and information sharing within and between Cross-Border Cyber Hubs
---------+Article 6 1.
---------+Article 6 2.
---------+Article 6 3.
---------+Article 6 4.
------+Article 7 Cooperation and information sharing with Union-level networks
---------+Article 7 1.
---------+Article 7 2.
------+Article 8 Security
---------+Article 8 1.
---------+Article 8 2.
------+Article 9 Funding of the European Cybersecurity Alert System
---------+Article 9 1.
---------+Article 9 2.
---------+Article 9 3.
---------+Article 9 4.
---+CHAPTER III CYBERSECURITY EMERGENCY MECHANISM
------+Article 10 Establishment of the Cybersecurity Emergency Mechanism
---------+Article 10 1.
---------+Article 10 2.
---------+Article 10 3.
---------+Article 10 4.
------+Article 11 Types of action
------+Article 12 Coordinated preparedness testing of entities
---------+Article 12 1.
---------+Article 12 2.
---------+Article 12 3.
---------+Article 12 4.
---------+Article 12 5.
---------+Article 12 6.
---------+Article 12 7.
------+Article 13 Other preparedness actions
---------+Article 13 1.
---------+Article 13 2.
------+Article 14 Establishment of the EU Cybersecurity Reserve
---------+Article 14 1.
---------+Article 14 2.
---------+Article 14 3.
---------+Article 14 4.
---------+Article 14 5.
---------+Article 14 6.
---------+Article 14 7.
------+Article 15 Requests for support from the EU Cybersecurity Reserve
---------+Article 15 1.
---------+Article 15 2.
---------+Article 15 3.
---------+Article 15 4.
---------+Article 15 5.
---------+Article 15 6.
---------+Article 15 7.
------+Article 16 Implementation of the support from the EU Cybersecurity Reserve
---------+Article 16 1.
---------+Article 16 2.
---------+Article 16 3.
---------+Article 16 4.
---------+Article 16 5.
---------+Article 16 6.
---------+Article 16 7.
---------+Article 16 8.
---------+Article 16 9.
---------+Article 16 10.
---------+Article 16 11.
---------+Article 16 12.
------+Article 17 Trusted managed security service providers
---------+Article 17 1.
---------+Article 17 2.
---------+Article 17 3.
------+Article 18 Actions supporting mutual assistance
---------+Article 18 1.
---------+Article 18 2.
------+Article 19 Support to DEP-associated third countries
---------+Article 19 1.
---------+Article 19 2.
---------+Article 19 3.
---------+Article 19 4.
---------+Article 19 5.
---------+Article 19 6.
---------+Article 19 7.
---------+Article 19 8.
---------+Article 19 9.
---------+Article 19 10.
---------+Article 19 11.
------+Article 20 Coordination with Union crisis management mechanisms
---------+Article 20 1.
---------+Article 20 2.
---+CHAPTER IV EUROPEAN CYBERSECURITY INCIDENT REVIEW MECHANISM
------+Article 21 European Cybersecurity Incident Review Mechanism
---------+Article 21 1.
---------+Article 21 2.
---------+Article 21 3.
---------+Article 21 4.
---------+Article 21 5.
---+CHAPTER V FINAL PROVISIONS
------+Article 22 Amendments to Regulation (EU) 2021/694
------+Article 23 Exercise of the delegation
---------+Article 23 1.
---------+Article 23 2.
---------+Article 23 3.
---------+Article 23 4.
---------+Article 23 5.
---------+Article 23 6.
------+Article 24 Committee procedure
---------+Article 24 1.
---------+Article 24 2.
------+Article 25 Evaluation and review
---------+Article 25 1.
---------+Article 25 2.
---------+Article 25 3.
------+Article 26 Entry into force
---+ANNEX
 English - European Union - ICT - Cybersecurity -

REGULATION (EU) 2025/38 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act)

REGULATION (EU) 2025/38 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

of 19 December 2024

laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act)

This Regulation shall be binding in its entirety and directly applicable in all Member States.

1. Prezentare generală

,
CHAPTER I GENERAL PROVISIONS CHAPTER I GENERAL PROVISIONS
CHAPTER II THE EUROPEAN CYBERSECURITY ALERT SYSTEM CHAPTER II THE EUROPEAN CYBERSECURITY ALERT SYSTEM
CHAPTER III CYBERSECURITY EMERGENCY MECHANISM CHAPTER III CYBERSECURITY EMERGENCY MECHANISM
CHAPTER IV EUROPEAN CYBERSECURITY INCIDENT REVIEW MECHANISM CHAPTER IV EUROPEAN CYBERSECURITY INCIDENT REVIEW MECHANISM
CHAPTER V FINAL PROVISIONS CHAPTER V FINAL PROVISIONS
ANNEX



ANNEX

Regulation (EU) 2021/694 is amended as follows:

(1) 

in Annex I, the section ‘Specific Objective 3 – Cybersecurity and Trust’ is replaced by the following:

‘Specific Objective 3 – Cybersecurity and Trust

The Programme shall stimulate the reinforcement, building and acquisition of essential capacities to secure the Union’s digital economy, society and democracy by reinforcing the Union cybersecurity industrial potential and competitiveness, as well as by improving capabilities of both the private and public sectors to protect citizens and businesses from cyber threats, including by supporting the implementation of Directive (EU) 2016/1148.

Initial and, where appropriate, subsequent actions under this objective shall include:

1. 

Co-investment with Member States in advanced cybersecurity equipment, infrastructure and know-how that are essential to protect critical infrastructures and the Digital Single Market at large. Such co-investment could include investments in quantum facilities and data resources for cybersecurity, situational awareness in cyberspace including National Cyber Hubs and Cross-Border Cyber Hubs forming the European Cybersecurity Alert System, as well as other tools to be made available to public and private sector across Europe.

2. 

Scaling up existing technological capacities and networking the competence centres in Member States and making sure that those capacities respond to public sector and industry needs, including through products and services that reinforce cybersecurity and trust within the Digital Single Market.

3. 

Ensuring wide deployment of effective state-of-the-art cybersecurity and trust solutions across the Member States. Such deployment includes strengthening the security and safety of products, from their design to their commercialisation.

4. 

Support closing the cybersecurity skills gap, taking into account gender balance by, for example, aligning cybersecurity skills programmes, adapting them to specific sectorial needs and facilitating access to targeted specialised training.

5. 

Promoting solidarity among Member States in preparing for and responding to significant cybersecurity incidents and large-scale cybersecurity incidents through deployment of cybersecurity services across borders, including support for mutual assistance between public authorities and the establishment of a reserve of trusted managed security service providers at Union level.’;

(2) 

in Annex II, the section ‘Specific Objective 3 – Cybersecurity and Trust’ is replaced by the following:

‘Specific Objective 3 – Cybersecurity and Trust

3.1. The number of cybersecurity infrastructure, or tools, or both jointly procured including in the context of the European Cybersecurity Alert System

3.2. The number of users and user communities getting access to European cybersecurity facilities

3.3. The number of actions supporting preparedness for and response to cybersecurity incidents under the Cybersecurity Emergency Mechanism’.

▼C1

A statement has been made with regard to this act and can be found in OJ C, C/2025/310, 15.1.2025, ELI: http://data.europa.eu/eli/C/2025/310/oj.

1.1 Referințe

1.2 Cerințe identificate

1.3 Standarde asociate

2. Cerințe identificate

Cerințe

3. Standarde asociate

Standarde

Tichete legate

Legături
is related to Imported: Verordnung (EU) 2025/38 über Maßnahmen zur Stärkung der Solidarität und der Kapazitäten in der Union für die Erkennung von, Vorsorge für und Bewältigung von Cyberbedrohungen und Sicherheitsvorfällen (CELEX:02025R0038-20250115)