Regulation (EU, Euratom) 2023/2841

In force

This text since 18 Dec 2023law://eu/reg/2023/2841/art_25__para_2@2026-11-12

Contents

2.By 8 January 2027 and every two years thereafter, the Commission shall assess and report on the implementation of this Regulation and on the experience gained at a strategic and operational level to the European Parliament and to the Council.The report referred to in the first subparagraph of this paragraph shall include the review referred to in Article 16(1), on the possibility of establishing CERT-EU as a Union office.

Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.

Key facts

Type: Regulation · (EU, Euratom) 2023/2841
Adopted: 13 Dec 2023
In force: 7 Jan 2024
Made by: Council of the European Union, European Parliament
Official: EUR-Lex 32023R2841 · ELI

Topics

computer crime EU body EU institution EU office or agency information security information system information warfare operation of the Institutions risk management Provisions governing the Institutions Security system Telecommunications

History · 1 version

18 Dec 2023Reading

Connections

See on a map

Cited by 1: Regulation (EU) 2026/21082 provisions
Cites 1: this act

Defined terms · 15

Show every defined term

cloud computing service
means a cloud computing service as defined in Article 6, point (30), of Directive (EU) 2022/2555.
cyber threat
means a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881;
cybersecurity
means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;
cybersecurity risk
means a risk as defined in Article 6, point (9), of Directive (EU) 2022/2555;
highest level of management
means a manager, management body or coordination and oversight body that is responsible for the functioning of a Union entity, at the most senior administrative level, with a mandate to adopt or authorise decisions in line with the high-level governance arrangements of that Union entity, without prejudice to the formal responsibilities of other levels of management for compliance and cybersecurity risk management in their respective areas of responsibility;
incident
means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555;
incident handling
means incident handling as defined in Article 6, point (8), of Directive (EU) 2022/2555;
large-scale cybersecurity incident
means a large-scale cybersecurity incident as defined in Article 6, point (7), of Directive (EU) 2022/2555;
major incident
means an incident which causes a level of disruption that exceeds a Union entity’s and CERT-EU’s capacity to respond to it or which has a significant impact on at least two Union entities;
near miss
means a near miss as defined in Article 6, point (5), of Directive (EU) 2022/2555;
network and information system
means a network and information system as defined in Article 6, point (1), of Directive (EU) 2022/2555;
security of network and information systems
means security of network and information systems as defined in Article 6, point (2), of Directive (EU) 2022/2555;
significant cyber threat
means a significant cyber threat as defined in Article 6, point (11), of Directive (EU) 2022/2555;
Union entities
means the Union institutions, bodies, offices and agencies set up by or pursuant to the Treaty on European Union, the Treaty on the Functioning of European Union (TFEU) or the Treaty establishing the European Atomic Energy Community;
vulnerability
means a vulnerability as defined in Article 6, point (15), of Directive (EU) 2022/2555;