EU Network Code on Cybersecurity for the Electricity Sector
NCCS: Information Sharing, Incident Reporting and Crisis Management

EU Network Code on Cybersecurity for the Electricity Sector NCCS-Art.47_48: Crisis management and Cyber Solidarity Act coordination (NCCS Articles 47-48)

Article 47 establishes the CRISIS MANAGEMENT framework for cross-border electricity cyber-incidents that escalate beyond entity-level + Member-State-level response capacity. The EECCG activates a coordinated EU-level crisis-response procedure including: (a) immediate cross-border information sharing + situational awareness; (b) coordination with EU-CyCLONe (European cyber crisis liaison organisation network) under the EU Cyber Solidarity Act (Regulation (EU) 2025/38) Article 10-11; (c) coordinated public communication + reassurance; (d) coordinated mutual assistance + recovery support. Article 48 establishes the linkage to the EU Cyber Solidarity Act (CSA) Cyber Emergency Mechanism: where a Union-wide cyber-attack on cross-border electricity flows qualifies as a 'large-scale cybersecurity incident' under the CSA, NCCS authorities cooperate with the CSA Cyber Reserve + the EU Cybersecurity Emergency Mechanism for electricity-sector incident response.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 3 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • CSA-Art.10_11 Establishment of the Cybersecurity Emergency Mechanism and types of action (Articles 10-11)
  • CSA-Art.21 European Cybersecurity Incident Review Mechanism (Article 21)
  • CSA-Art.22 Amendments to Regulation (EU) 2021/694 (Article 22)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in NCCS: Information Sharing, Incident Reporting and Crisis Management

Query this from an agent

The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.