Source: OJ L 333, 27.12.2022, pp. 164–198

Current language: EN

Article 10 Member States’ support to critical entities


Summary What does Article 10 of the CER directive say?

This article establishes the support role that Member States must play in helping critical entities build and maintain their resilience.

Rather than placing obligations solely on the entities themselves, it creates a complementary layer of state-level assistance — through guidance, training, exercises, and potentially even financial resources.

It also requires competent authorities to actively cooperate and exchange good practices with critical entities, and obliges Member States to facilitate voluntary information sharing among critical entities themselves.

Important points:

  • Member States are required to support critical entities through guidance, training, exercises, and, where justified by public interest, financial resources.
  • Competent authorities are required to cooperate and exchange information and good practices with critical entities across all sectors listed in the Annex.
  • Member States must facilitate voluntary information sharing between critical entities, subject to rules on classified information, competition, and data protection.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Member States shall support critical entities in enhancing their resilience. That support may include developing guidance materials and methodologies, supporting the organisation of exercises to test their resilience and providing advice and training to the personnel of critical entities. Without prejudice to applicable rules on State aid, Member States may provide financial resources to critical entities, where necessary and justified by public interest objectives.

    1. Each Member State shall ensure that its competent authority cooperates and exchanges information and good practices with critical entities of the sectors set out in the Annex.

    1. Member States shall facilitate voluntary information sharing between critical entities in relation to matters covered by this Directive, in accordance with Union and national law on, in particular, classified and sensitive information, competition and protection of personal data.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod