Recital 105 Voluntary reporting of cyber threats

A proactive approach to cyber threatsmeans a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881; is a vital component of cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; riskmeans the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; management that should enable the competent authorities to effectively prevent cyber threatsmeans a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881; from materialising into incidentsmeans an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; that may cause considerable material or non-material damage. For that purpose, the notification of cyber threatsmeans a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881; is of key importance. To that end, entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; are encouraged to report on a voluntary basis cyber threatsmeans a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881;.