Skip to content

GlobalLawDBby GenieAI

Laws Search Sanctions Map Data Developers

Search the text of the law

Log in Get an API key

Laws Search Sanctions Map Data Developers

Log in Get an API key

The Global Law Database. Free to read, built for people and AI agents.

Explore

All laws
Search the text
Sanctions
Map of connections
Compare UK and EU

Developers

AI agents (MCP)
REST API
Bulk data
API keys

Coverage

United Kingdom
European Union
United States
Canada
Australia
France
Germany
Netherlands
Spain
Austria
Norway
Finland
Switzerland
Ireland

GlobalLawDB is made by GenieAI, London. It is not legal advice: check the official text before relying on it. Text comes from official publishers under their licences, listed on the Data page.

ThemeMatch my systemLightDark

European Union
Regulation (EU, Euratom) 2023/2841
III
Article 10
2.

Regulation (EU, Euratom) 2023/2841

In forceThis text since 18 Dec 2023law://eu/reg/2023/2841/art_10__para_2@2026-11-10

Version in force onWhereEuropean Union

Contents

1. An Interinstitutional Cybersecurity Board (IICB) is hereby…
10. The IICB may act by means of a simplified written procedur…
11. The secretariat of the IICB shall be provided by the Commi…
12. The representatives nominated by the EUAN shall relay the…
13. The IICB may establish an executive committee to assist it…
14. By 8 January 2025 and on an annual basis thereafter, the I…
2. The IICB shall be responsible for:
3. The IICB shall consist of: The Union entities represented…
4. Members of the IICB may be assisted by an alternate. Other…
5. The Head of CERT-EU and the Chairs of the Cooperation Grou…
6. The IICB shall adopt its internal rules of procedure.
7. The IICB shall designate a Chair in accordance with its in…
8. The IICB shall meet at least three times a year at the ini…
9. Each member of the IICB shall have one vote. The IICB’s de…

Contents

1. An Interinstitutional Cybersecurity Board (IICB) is hereby…
10. The IICB may act by means of a simplified written procedur…
11. The secretariat of the IICB shall be provided by the Commi…
12. The representatives nominated by the EUAN shall relay the…
13. The IICB may establish an executive committee to assist it…
14. By 8 January 2025 and on an annual basis thereafter, the I…
2. The IICB shall be responsible for:
3. The IICB shall consist of: The Union entities represented…
4. Members of the IICB may be assisted by an alternate. Other…
5. The Head of CERT-EU and the Chairs of the Cooperation Grou…
6. The IICB shall adopt its internal rules of procedure.
7. The IICB shall designate a Chair in accordance with its in…
8. The IICB shall meet at least three times a year at the ini…
9. Each member of the IICB shall have one vote. The IICB’s de…

2.The IICB shall be responsible for:

(a)monitoring and supporting the implementation of this Regulation by the Union entities;

(b)supervising the implementation of general priorities and objectives by CERT-EU and providing strategic direction to CERT-EU.

Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.

Key facts

Type: Regulation · (EU, Euratom) 2023/2841
Adopted: 13 Dec 2023
In force: 7 Jan 2024
Made by: Council of the European Union, European Parliament
Official: EUR-Lex 32023R2841 · ELI

Topics

computer crime EU body EU institution EU office or agency information security information system information warfare operation of the Institutions risk management Provisions governing the Institutions Security system Telecommunications

History · 1 version

18 Dec 2023Reading

Connections

Cited by 2: this act; Regulation (EU) 2026/21082 provisions

Defined terms · 15

Show every defined term

cloud computing service
means a cloud computing service as defined in Article 6, point (30), of Directive (EU) 2022/2555.
cyber threat
means a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881;
cybersecurity
means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;
cybersecurity risk
means a risk as defined in Article 6, point (9), of Directive (EU) 2022/2555;
highest level of management
means a manager, management body or coordination and oversight body that is responsible for the functioning of a Union entity, at the most senior administrative level, with a mandate to adopt or authorise decisions in line with the high-level governance arrangements of that Union entity, without prejudice to the formal responsibilities of other levels of management for compliance and cybersecurity risk management in their respective areas of responsibility;
incident
means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555;
incident handling
means incident handling as defined in Article 6, point (8), of Directive (EU) 2022/2555;
large-scale cybersecurity incident
means a large-scale cybersecurity incident as defined in Article 6, point (7), of Directive (EU) 2022/2555;
major incident
means an incident which causes a level of disruption that exceeds a Union entity’s and CERT-EU’s capacity to respond to it or which has a significant impact on at least two Union entities;
near miss
means a near miss as defined in Article 6, point (5), of Directive (EU) 2022/2555;
network and information system
means a network and information system as defined in Article 6, point (1), of Directive (EU) 2022/2555;
security of network and information systems
means security of network and information systems as defined in Article 6, point (2), of Directive (EU) 2022/2555;
significant cyber threat
means a significant cyber threat as defined in Article 6, point (11), of Directive (EU) 2022/2555;
Union entities
means the Union institutions, bodies, offices and agencies set up by or pursuant to the Treaty on European Union, the Treaty on the Functioning of European Union (TFEU) or the Treaty establishing the European Atomic Energy Community;
vulnerability
means a vulnerability as defined in Article 6, point (15), of Directive (EU) 2022/2555;

eu/reg/2023/2841