Article 14 Cooperation Group

---

In order to support and facilitate strategic cooperation and the exchange of information among Member States, as well as to strengthen trust and confidence, a Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; is established.

The Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; shall carry out its tasks on the basis of biennial work programmes referred to in paragraph 7.

The Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; shall be composed of representatives means a natural or legal person established in the Union explicitly designated to act on behalf of a DNS service provider, a TLD name registry, an entity providing domain name registration services, a cloud computing service provider, a data centre service provider, a content delivery network provider, a managed service provider, a managed security service provider, or a provider of an online marketplace, of an online search engine or of a social networking services platform that is not established in the Union, which may be addressed by a competent authority or a CSIRT in the place of the entity itself with regard to the obligations of that entity under this Directive; it has legal personality or is entitled by law to act on behalf of another entity with legal personality; it has the power to address to natural or legal persons administrative or regulatory decisions affecting their rights in the cross-border movement of persons, goods, services or capital; it is financed, for the most part, by the State, regional authorities or by other bodies governed by public law, is subject to management supervision by those authorities or bodies, or has an administrative, managerial or supervisory board, more than half of whose members are appointed by the State, regional authorities or by other bodies governed by public law; it is established for the purpose of meeting needs in the general interest and does not have an industrial or commercial character; of Member States, the Commission and ENISA. The European External Action Service shall participate in the activities of the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; as an observer. The European Supervisory Authorities (ESAsEuropean Supervisory Authority) and the competent authoritiesas defined in Article 46 under Regulation (EU) 2022/2554 may participate in the activities of the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; in accordance with Article 47(1) of that Regulation.

Where appropriate, the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; may invite the European Parliament and representatives means a natural or legal person established in the Union explicitly designated to act on behalf of a DNS service provider, a TLD name registry, an entity providing domain name registration services, a cloud computing service provider, a data centre service provider, a content delivery network provider, a managed service provider, a managed security service provider, or a provider of an online marketplace, of an online search engine or of a social networking services platform that is not established in the Union, which may be addressed by a competent authority or a CSIRT in the place of the entity itself with regard to the obligations of that entity under this Directive; it has legal personality or is entitled by law to act on behalf of another entity with legal personality; it has the power to address to natural or legal persons administrative or regulatory decisions affecting their rights in the cross-border movement of persons, goods, services or capital; it is financed, for the most part, by the State, regional authorities or by other bodies governed by public law, is subject to management supervision by those authorities or bodies, or has an administrative, managerial or supervisory board, more than half of whose members are appointed by the State, regional authorities or by other bodies governed by public law; it is established for the purpose of meeting needs in the general interest and does not have an industrial or commercial character; of relevant stakeholders to participate in its work.

The Commission shall provide the secretariat.

1. to provide guidance to the competent authoritiesas defined in Article 46 in relation to the transposition and implementation of this Directive;

2. to provide guidance to the competent authoritiesas defined in Article 46 in relation to the development and implementation of policies on coordinated vulnerability means a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat; disclosure, as referred to in Article 7(2), point (c);

3. to exchange best practices and information in relation to the implementation of this Directive, including in relation to cyber threats means a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881;, incidents means an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems;, vulnerabilities means a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat;, near misses, awareness-raising initiatives, training, exercises and skills, capacity building, standards means a standard as defined in Article 2, point (1), of Regulation (EU) No 1025/2012 of the European Parliament and of the Council (^29^); Regulation (EU) No 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, amending Council Directives 89/686/EEC and 93/15/EEC and Directives 94/9/EC, 94/25/EC, 95/16/EC, 97/23/EC, 98/34/EC, 2004/22/EC, 2007/23/EC, 2009/23/EC and 2009/105/EC of the European Parliament and of the Council and repealing Council decision 87/95/EEC and Decision No 1673/2006/EC of the European Parliament and of the Council (OJ L 316, 14.11.2012, p. 12). and technical specifications means a technical specification as defined in Article 2, point (4), of Regulation (EU) No 1025/2012; as well as the identification of essential and important entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; pursuant to Article 2(2), points (b) to (e);

4. to exchange advice and cooperate with the Commission on emerging cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; policy initiatives and the overall consistency of sector-specific cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; requirements;

5. to exchange advice and cooperate with the Commission on draft delegated or implementing acts adopted pursuant to this Directive;

6. to exchange best practices and information with relevant Union institutions, bodies, offices and agencies;

7. to exchange views on the implementation of sector-specific Union legal acts that contain provisions on cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;;

8. where relevant, to discuss reports on the peer review referred to in Article 19(9) and draw up conclusions and recommendations;

9. to carry out coordinated security risk means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; assessments of critical supply chains in accordance with Article 22(1);

10. to discuss cases of mutual assistance, including experiences and results from cross-border joint supervisory actions as referred to in Article 37;

11. upon the request of one or more Member States concerned, to discuss specific requests for mutual assistance as referred to in Article 37;

12. to provide strategic guidance to the CSIRTscomputer security incident response teams network and EU-CyCLONe on specific emerging issues;

13. to exchange views on the policy on follow-up actions following large-scale cybersecurity incidents means an incident which causes a level of disruption that exceeds a Member State’s capacity to respond to it or which has a significant impact on at least two Member States; and crises on the basis of lessons learned of the CSIRTscomputer security incident response teams network and EU-CyCLONe;

14. to contribute to cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; capabilities across the Union by facilitating the exchange of national officials through a capacity building programme involving staff from the competent authoritiesas defined in Article 46 or the CSIRTscomputer security incident response teams;

15. to organise regular joint meetings with relevant private stakeholders from across the Union to discuss activities carried out by the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; and gather input on emerging policy challenges;

16. to discuss the work undertaken in relation to cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; exercises, including the work done by ENISA;

17. to establish the methodology and organisational aspects of the peer reviews referred to in Article 19(1), as well as to lay down the self-assessment methodology for Member States in accordance with Article 19(5), with the assistance of the Commission and ENISA, and, in cooperation with the Commission and ENISA, to develop codes of conduct underpinning the working methods of designated cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; experts in accordance with Article 19(6);

18. to prepare reports for the purpose of the review referred to in Article 40 on the experience gained at a strategic level and from peer reviews;

19. to discuss and carry out on a regular basis an assessment of the state of play of cyber threats means a cyber threat as defined in Article 2, point (8), of Regulation (EU) 2019/881; or incidents means an event compromising the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, network and information systems;, such as ransomware.

The Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; shall submit the reports referred to in the first subparagraph, point (r), to the Commission, to the European Parliament and to the Council.

Member States shall ensure effective, efficient and secure cooperation of their representatives means a natural or legal person established in the Union explicitly designated to act on behalf of a DNS service provider, a TLD name registry, an entity providing domain name registration services, a cloud computing service provider, a data centre service provider, a content delivery network provider, a managed service provider, a managed security service provider, or a provider of an online marketplace, of an online search engine or of a social networking services platform that is not established in the Union, which may be addressed by a competent authority or a CSIRT in the place of the entity itself with regard to the obligations of that entity under this Directive; it has legal personality or is entitled by law to act on behalf of another entity with legal personality; it has the power to address to natural or legal persons administrative or regulatory decisions affecting their rights in the cross-border movement of persons, goods, services or capital; it is financed, for the most part, by the State, regional authorities or by other bodies governed by public law, is subject to management supervision by those authorities or bodies, or has an administrative, managerial or supervisory board, more than half of whose members are appointed by the State, regional authorities or by other bodies governed by public law; it is established for the purpose of meeting needs in the general interest and does not have an industrial or commercial character; in the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU;.

The Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; may request from the CSIRTscomputer security incident response teams network a technical report on selected topics.

By 1 February 2024 and every two years thereafter, the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; shall establish a work programme in respect of actions to be undertaken to implement its objectives and tasks.

The Commission may adopt implementing acts laying down procedural arrangements necessary for the functioning of the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU;.

Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 39(2).

The Commission shall exchange advice and cooperate with the Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; on the draft implementing acts referred to in the first subparagraph of this paragraph in accordance with paragraph (4), point (e).

The Cooperation Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; shall meet on a regular basis and in any event at least once a year with the Critical Entities means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; Resilience Group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; established under Directive (EU) 2022/2557 to promote and facilitate strategic cooperation and the exchange of information.