- contracting authority
means the Commission or, to the extent that the operation and administration of the EU Cybersecurity Reserve has been entrusted to ENISA pursuant to Article 14(5), ENISA;
- Cross-Border Cyber Hub
means a multi-country platform, established by a written consortium agreement that brings together in a coordinated network structure National Cyber Hubs from at least three Member States, and that is designed to enhance the monitoring, detection and analysis of cyber threats to prevent incidents and to support the production of cyber threat intelligence, in particular through the exchange of relevant data and information, anonymised where appropriate, as well as through the sharing of state-of-the-art tools and the joint development of cyber detection, analysis, and prevention and protection capabilities in a trusted environment;
- CSIRT
means a CSIRT designated or established pursuant to Article 10 of Directive (EU) 2022/2555;
- cyber threat
means a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881;
- entities operating in other critical sectors
means the types of entity listed in Annex II to Directive (EU) 2022/2555;
- entities operating in sectors of high criticality
means the types of entity listed in Annex I to Directive (EU) 2022/2555;
- entity
means an entity as defined in Article 6, point (38), of Directive (EU) 2022/2555;
- Hosting Consortium
means a consortium composed of participating Member States, that have agreed to establish and to contribute to the acquisition of tools, infrastructure or services for, and the operation of, a Cross-Border Cyber Hub;
- incident
means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555;
- large-scale cybersecurity incident
means a large-scale cybersecurity incident as defined in Article 6, point (7), of Directive (EU) 2022/2555;
- large-scale-equivalent cybersecurity incident
means, in the case of Union institutions, bodies, offices and agencies, a major incident and, in the case of DEP-associated third countries, an incident which causes a level of disruption that exceeds the capacity of the DEP-associated third country concerned to respond to it;
- major incident
means a major incident as defined in Article 3, point (8), of Regulation (EU, Euratom) 2023/2841 of the European Parliament and the Council;
- managed security service provider
means a managed security service provider as defined in Article 6, point (40), of Directive (EU) 2022/2555;
- risk
means risk as defined in Article 6, point (9), of Directive (EU) 2022/2555;
- significant cybersecurity incident
means an incident fulfilling the criteria set out in Article 23(3) of Directive (EU) 2022/2555;
- trusted managed security service providers
means managed security service providers selected to be included in the EU Cybersecurity Reserve in accordance with Article 17.