Regulation (EU) 2019/881 (Cybersecurity Act)

means accreditation as defined in point (10) of Article 2 of Regulation (EC) No 765/2008;

means a basis for confidence that an ICT product, ICT service, ICT process or managed security service meets the security requirements of a specific European cybersecurity certification scheme, and indicates the level at which an ICT product, ICT service, ICT process or managed security service has been evaluated but as such does not measure the security of the ICT product, ICT service, ICT process or managed security service concerned;

means a conformity assessment as defined in point (12) of Article 2 of Regulation (EC) No 765/2008;

means a conformity assessment body as defined in point (13) of Article 2 of Regulation (EC) No 765/2008;

means an action carried out by a manufacturer or provider of ICT products, ICT services, ICT processes or managed security services, which evaluates whether those ICT products, ICT services, ICT processes or managed security services meet the requirements of a specific European cybersecurity certification scheme.

means any potential circumstance, event or action that could damage, disrupt or otherwise adversely impact network and information systems, the users of such systems and other persons;

means the activities necessary to protect network and information systems, the users of such systems, and other persons affected by cyber threats;

means a digital service provider as defined in point (6) of Article 4 of Directive (EU) 2016/1148;

means a document issued by a relevant body, attesting that a given ICT product, ICT service, ICT process or managed security service has been evaluated for compliance with specific security requirements laid down in a European cybersecurity certification scheme;

means a comprehensive set of rules, technical requirements, standards and procedures that are established at Union level and that apply to the certification or conformity assessment of specific ICT products, ICT services, ICT processes or managed security services;

means an incident as defined in point (7) of Article 4 of Directive (EU) 2016/1148;

means incident handling as defined in point (8) of Article 4 of Directive (EU) 2016/1148;

means a service provided to a third party consisting of carrying out, or providing assistance for, activities relating to cybersecurity risk management, such as incident handling, penetration testing, security audits and consulting, including expert advice, related to technical support;

means a national accreditation body as defined in point (11) of Article 2 of Regulation (EC) No 765/2008;

means a comprehensive set of rules, technical requirements, standards and procedures developed and adopted by a national public authority and that apply to the certification or conformity assessment of ICT products, ICT services, ICT processes or managed security services falling under the scope of the specific scheme;

means a national strategy on the security of network and information systems as defined in point (3) of Article 4 of Directive (EU) 2016/1148;

means a network and information system as defined in point (1) of Article 4 of Directive (EU) 2016/1148;

means an operator of essential services as defined in point (4) of Article 4 of Directive (EU) 2016/1148;

means a standard as defined in point (1) of Article 2 of Regulation (EU) No 1025/2012;

means a document that prescribes the technical requirements to be met by, or conformity assessment procedures relating to, an ICT product, ICT service, ICT process or managed security service;