FantasticSearch

1. The users referred to in Article 14(3) may request services from the EU Cybersecurity Reserve to support response to and initiate recovery from significant cybersecurity incidents, large-scale cybersecurity incidents or large-scale-equivalent cybersecurity incidents.

2. To receive support from the EU Cybersecurity Reserve, the users referred to in Article 14(3) shall take all appropriate measures to mitigate the effects of the incident for which the support is requested, including, where relevant, the provision of direct technical assistance, and other resources to assist the response to the incident, and recovery efforts.

3. Requests for support shall be transmitted to the contracting authority as follows:

(a) in the case of the users referred to in Article 14(3), point (a), of this Regulation, via the single point of contact designated or established pursuant to Article 8(3) of Directive (EU) 2022/2555;

(b) in the case of the user referred to in Article 14(3), point (b), by that user;

(c) in the case of the users referred to in Article 14(3), point (c), via the single point of contact referred to in Article 19(9).

4. In the case of requests from the users referred to in Article 14(3), point (a), Member States shall inform the CSIRTs network, and, where appropriate, EU-CyCLONe, about their users’ requests for incident response and initial recovery support pursuant to this Article.

5. Requests for incident response and initial recovery support shall include:

(a) appropriate information regarding the entity affected and the potential impact of the incident on:

(i) in the case of users referred to in Article 14(3), point (a), the Member States and users affected, including the risk of spillover to another Member State;

(ii) in the case of the user referred to in Article 14(3), point (b), the Union institutions, bodies, offices or agencies affected, (iii) in the case of users referred to in Article 14(3), point (c), the DEP-associated countries affected;

(b) information regarding the requested service, together with the planned use of the requested support, including an indication of the estimated needs;

(c) appropriate information about measures taken to mitigate the incident for which the support is requested, as referred to in paragraph 2;

(d) where relevant, available information about other forms of support available to the entity affected.

6. ENISA, in cooperation with the Commission and EU-CyCLONe, shall develop a template to facilitate the submission of requests for support from the EU Cybersecurity Reserve.

7. The Commission may, by means of implementing acts, specify further the detailed procedural arrangements for the way in which the EU Cybersecurity Reserve support services are to be requested and the way in which those requests are to be responded to pursuant to this Article, to Article 16(1) and to Article 19(10), including arrangements for submitting such requests and delivering the responses and templates for the reports referred to in Article 16(9). Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 24(2).