EU regulatory register · NIS2
Article 11Requirements, technical capabilities and tasks of CSIRTs
CELEX 32022L2555 · Read on 2026-08-18 · Chapter II
Short answer
1. The CSIRTs shall comply with the following requirements:
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-11 · Short answer as data · Official text
NIS2, cybersecurity in short
Essential and important entities must take security measures, report significant incidents within 24 hours, and management is personally accountable.
- Are we covered by NIS2?
- What is management's responsibility under NIS2?
- Does NIS2 or DORA apply to financial entities?
Source: NovaCopilot
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. The CSIRTs shall comply with the following requirements:
(a)
the CSIRTs shall ensure a high level of availability of their communication channels by avoiding single points of failure, and shall have several means for being contacted and for contacting others at all times; they shall clearly specify the communication channels and make them known to constituency and cooperative partners;
(b)
the CSIRTs’ premises and the supporting information systems shall be located at secure sites;
(c)
the CSIRTs shall be equipped with an appropriate system for managing and routing requests, in particular to facilitate effective and efficient handovers;
(d)
the CSIRTs shall ensure the confidentiality and trustworthiness of their operations;
(e)
the CSIRTs shall be adequately staffed to ensure availability of their services at all times and they shall ensure that their staff is trained appropriately;
(f)
the CSIRTs shall be equipped with redundant systems and backup working space to ensure continuity of their services.
The CSIRTs may participate in international cooperation networks.
The article continues in the official text.
Follow-up questions
Other articles in this chapter
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit