(1)

Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union · European Union

Requirements for CSIRTs: CSIRTs shall ensure a high level of availability of their communications services by avoiding single points of failure, and shall have several means for being contacted and for contacting others at all times. Furthermore, the communication channels shall be clearly specified and well known to the constituency and cooperative partners. CSIRTs' premises and the supporting information systems shall be located in secure sites. Business continuity: CSIRTs shall be equipped with an appropriate system for managing and routing requests, in order to facilitate handovers. CSIRTs shall be adequately staffed to ensure availability at all times. CSIRTs shall rely on an infrastructure the continuity of which is ensured. To that end, redundant systems and backup working space shall be available. CSIRTs shall have the possibility to participate, where they wish to do so, in international cooperation networks.

← anx_I__cpt_1__text_1 · All articles · anx_I__cpt_1__point_1__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-28 · Text as adopted (Official Journal); later amendments are not incorporated in this text.