Commission publishes guidelines and reporting template for critical entity resilience

Original title: Communication from the Commission – Commission Guidelines and reporting template developed pursuant to Articles 5(5), 6(6) and 7(3) of Directive (EU) 2022/2557 on the resilience of critical entities

The European Commission has published new guidelines and a reporting template implementing requirements under the Critical Entities Resilience (CER) Directive. These guidance documents clarify obligations for critical entities under Articles 5(5), 6(6), and 7(3) of Directive (EU) 2022/2557, addressing resilience measures, reporting procedures, and operational security requirements. Critical entities across essential sectors must use the standardized template for compliance reporting and align their practices with the Commission's interpretative guidance.

What changed

• Commission publishes implementing guidelines for Articles 5(5), 6(6), and 7(3) of the CER Directive to clarify operational and reporting obligations
• A standardized reporting template is introduced to facilitate consistent reporting by critical entities across the EU
• The guidance clarifies requirements for critical entity resilience measures, cybersecurity practices, and incident reporting procedures

Who is affected

Critical entities in essential sectors (energy, transport, water, health, digital infrastructure, and others listed in the CER Directive) operating in EU member states. Both public and private entities subject to the Directive are affected.

Summary generated by a language model; the official text prevails. Not legal advice.