Source: OJ L, 2024/2690, 18.10.2024
EN- High common level of cybersecurity for entities
Implementing acts
- Cybersecurity measures and significant incidents for relevant entities
Article 9 Significant incidents with regard to content delivery network providers
With regard to content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers; providers, an incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; shall be considered significant under Article 3(1)(g) where it fulfils one or more of the following criteria:
a content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers; is completely unavailable for more than 30 minutes;
the availability of a content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers; is limited for more than 5 % of the content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers;’s users in the Union, or for more than 1 million of the content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers;’s users in the Union, whichever number is smaller, for a duration of more than one hour;
the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers; is compromised as a result of a suspectedly malicious action;
the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers; is compromised with an impact on more than 5 % of that content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers;’s users in the Union, or on more than 1 million of that content delivery network means a network of geographically distributed servers for the purpose of ensuring high availability, accessibility or fast delivery of digital content and services to internet users on behalf of content and service providers;’s users in the Union, whichever number is smaller.
Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.