Source: OJ L 333, 27.12.2022, p. 80–152
Recital 97 Undersea communication cables
The internal market is more reliant on the functioning of the internet than ever. The services of almost all essential and important entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; are dependent on services provided over the internet. In order to ensure the smooth provision of services provided by essential and important entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations;, it is important that all providers of public electronic communications networksmeans a public electronic communications network as defined in Article 2, point (8), of Directive (EU) 2018/1972; have appropriate cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risk-management measures in place and report significant incidentsmeans an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; in relation thereto. Member States should ensure that the security of the public electronic communications networksmeans a public electronic communications network as defined in Article 2, point (8), of Directive (EU) 2018/1972; is maintained and that their vital security interests are protected from sabotage and espionage. Since international connectivity enhances and accelerates the competitive digitalisation of the Union and its economy, incidentsmeans an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems; affecting undersea communications cables should be reported to the CSIRT or, where applicable, the competent authority. The national cybersecurity strategymeans a coherent framework of a Member State providing strategic objectives and priorities in the area of cybersecurity and the governance to achieve them in that Member State; should, where relevant, take into account the cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; of undersea communications cables and include a mapping of potential cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risksmeans the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; and mitigation measures to secure the highest level of their protection.