### life1 and the environmental acquis member states shall , where possible , seek to exploit synergies with union policy instruments serving climate change mitigation and adaptation , environmental protection and resource efficiency . 2 . member states shall , where appropriate , ensure complementarity and coordination with life , in particular with integrated projects in the areas of nature , water , waste , air , climate change mitigation and climate change adaptation . this coordination shall be achieved in particular by promoting the funding of activities through the csf funds that complement integrated projects under the life programme as well as by promoting the use of solutions , methods and approaches validated under the life programme . 3 . the relevant sectoral plans , programmes or strategies , as referred to in the life regulation , shall serve as the coordination framework for support from the different funds . ### 5 life and the environmental acquis member states and the commission shall , through a stronger thematic focus in programmes and the application of the principle of sustainable development in accordance with article 8 , seek to exploit synergies with union policy instruments serving climate change mitigation and adaptation , environmental protection and resource efficiency . 2 . member states shall promote and , where appropriate and in accordance with article 4 , ensure complementarity and coordination with life , in particular with integrated projects in the areas of nature , biodiversity , water , waste , air , climate change mitigation and climate change adaptation . this coordination shall be achieved through measures such as promoting the funding of activities through the european structural and investment funds that complement integrated projects under the life programme as well as by promoting the use of solutions , methods and approaches validated under the life programme , inter alia , including investments in green infrastructure , energy efficiency , eco - innovation , ecosystem - based solutions , and the adoption of related innovative technologies . 3 . the relevant sectoral plans , programmes or strategies may serve as the coordination framework , where support is foreseen for these areas .


### erasmus for all member states shall seek to use csf funds to mainstream tools and methods developed and tested successfully under ' erasmus for all ' . 2 . member states shall ensure effective coordination between csf funds and ‘ erasmus for all’ at national level through a clear distinction in the types of investment and target groups supported . member states shall seek complementarity with regards to the funding of mobility actions , while exploring possible synergies . 3 . coordination shall be achieved by putting in place appropriate cooperation mechanisms between managing authorities and the national agencies established under the ‘ erasmus for all’ programme . ### 6 erasmus for all member states shall seek to use european structural and investment funds to mainstream tools and methods developed and tested successfully under ' erasmus for all ' in order to maximise the social and economic impact of investment in people and , inter alia give impetus to youth initiatives and citizens actions . 2 . member states shall promote and ensure in accordance with article 4 , effective coordination between european structural and investment funds and ‘ erasmus for all’ at national level through a clear distinction in the types of investment and target groups supported . member states shall seek complementarity with regards to the funding of mobility actions . 3 . coordination shall be achieved by putting in place appropriate cooperation mechanisms between managing authorities and the national agencies established under the ‘ erasmus for all’ programme , which can foster transparent and accessible communication towards citizens at union , national and regional level .


### 7 programme for social change and innovation member states shall , where appropriate , seek effective coordination between the programme for social change and innovation and the support provided by the csf funds under the employment and social inclusion thematic objectives . 2 . member states shall , where appropriate , seek to scale - up the most successful measures developed under the progress axis of the psci , notably on social innovation and social policy experimentation with the support of the esf . 3 . in order to promote workers ' geographical mobility and boost employment opportunities , member states shall ensure complementarity of actions to enhance transnational labour mobility supported by the esf , including cross - border partnerships , with support provided under the eures axis of the psci . 4 . member states shall seek complementarity and coordination between csf funds ' support for self - employment , entrepreneurship , business creation and social enterprises and the psci support under the microfinance and social entrepreneurship axis aimed at increasing the access to microfinance for people furthest away from the labour market and for micro - enterprises as well as supporting the development of social enterprises . ### 7 programme for social change and innovation member states shall promote and ensure in accordance with article 4 effective coordination between the programme for social change and innovation and the support provided by the european structural and investment funds under the employment and social inclusion thematic objectives . this includes coordination of support provided under the eures axis of the psci with actions to enhance transnational labour mobility supported by the esf in order to promote workers ' geographical mobility and boost employment opportunities , as well as coordination between european structural and investment funds ' support for self - employment , entrepreneurship , business creation and social enterprises and the psci support under the microfinance and social entrepreneurship axis . 2 . member states shall seek to scale - up the most successful measures developed under the progress axis of the psci , notably on social innovation and social policy experimentation with the support of the esf . deleted deleted


### 8 connecting europe facility the cef is the dedicated union fund for the implementation of the union policies for trans - european transport networks of infrastructure in the field of transport , telecommunications and energy . to maximise european added value in these areas , member states and the commission shall ensure that erdf and cohesion fund interventions are planned in close cooperation with the support provided from the cef , so as to avoid duplication of efforts and ensure that optimal links of different types of infrastructure at local , regional and national levels , and across the union are provided for . maximum leverage of the different funding instruments shall be ensured for projects with a european and single market dimension , and in particular those projects implementing the priority transport , energy and digital infrastructure networks as identified in the respective ten policy frameworks . 2 . in the field of transport , plans shall be based on real and projected transport demand and identify missing links and bottlenecks , taking into account the development of union cross border links , and developing links across regions within a member state . investment in regional connectivity to the comprehensive trans - european transport network and to the core ten - t network shall ensure that urban and rural areas benefit from the opportunities created by major networks . 3 . prioritisation of investments which have an impact beyond a certain member state , particularly along the core ten - t network corridors , shall be coordinated with ten - t planning and core network corridors implementation plans , so that investments by the erdf and the cohesion fund in transport infrastructure are fully in line with the ten - t guidelines . 4 . member states shall take into account the commission’s white paper on transport1 which sets out a vision for a competitive and resource - efficient transport system , highlighting that a significant reduction in greenhouse gases is required in the transport sector . for the csf funds , this means focusing on sustainable forms of transport and sustainable urban mobility as well as investing in areas that offer the greatest european added value . once identified , investments shall be prioritised according to their contribution to mobility , sustainability , to reducing greenhouse gas emissions , and to the single european transport area . 5 . the csf funds shall deliver the local and regional infrastructures and their linkages to the priority union networks in the energy and telecommunication areas . 6 . member states and the commission shall put in place appropriate coordination and technical support mechanisms to ensure the complementarity and effective planning of ict measures to make full use of the different union instruments for the financing of broadband networks and the digital service infrastructures . the selection of the most appropriate financing instrument shall take into account the revenue generating potential of the operation and its level of risk in order to make the most effective use of public funds . if an operation has been submitted for cef funding but has not been selected , its evaluation under the cef shall be taken into account by the member state in the context of selection for support by the csf funds . ### 8 connecting europe facility to maximise european added value in the fields of transport , telecommunication and energy , member states and the commission shall ensure that erdf and cohesion fund interventions are planned in close cooperation with the support provided from the cef , so as to ensure complementarity , avoid duplication of efforts and ensure the optimal linkage of different types of infrastructure at local , regional and national levels , and across the union . maximum leverage of the different funding instruments shall be ensured for projects with a european and single market dimension , which deliver the highest european added - value , which promote social economic and territorial cohesion and in particular those projects implementing the priority transport , energy and digital infrastructure networks as identified in the respective ten policy frameworks in order to build new infrastructure and substantially upgrade existing infrastructure . 2 . in the field of transport , investment planning shall be based on real and projected transport demand and identify missing links and bottlenecks , taking into account , in a coherent approach , the development of union cross border links , and developing links across regions within a member state . investments in regional connectivity to the comprehensive trans - european transport network and to the core ten - t network shall ensure that urban and rural areas benefit from the opportunities created by major networks . 3 . prioritisation of investments which have an impact beyond a certain member state , particularly those which are part of the core ten - t network corridors , shall be coordinated with ten - t planning and core network corridors implementation plans , so that investments by the erdf and the cohesion fund in transport infrastructure are fully in line with the ten - t guidelines . 4 . member states shall focus on sustainable forms of transport and sustainable urban mobility as well as investing in areas that offer the greatest european added value , taking into account the need to improve the quality , accessibility and reliability of transport services to promote public transport . once identified , investments shall be prioritised according to their contribution to mobility , sustainability , to reducing greenhouse gas emissions , and to the single european transport area , in accordance with the vision set out in the commission’s white paper on transport1 for a competitive and resource - efficient transport system , highlighting that a significant reduction in greenhouse gases is required in the transport sector . the contribution of projects to sustainable european freight transport networks through the development of inland waterways should be promoted on the basis of a prior assessment of their environmental impact . 5 . the european structural and investment funds shall deliver the local and regional infrastructures and their linkages to the priority union networks in the energy and telecommunication areas . 6 . member states and the commission shall put in place appropriate coordination and technical support mechanisms to ensure the complementarity and effective planning of ict measures to make full use of the different union instruments for the financing of broadband networks and the digital service infrastructures . the selection of the most appropriate financing instrument shall take into account the revenue generating potential of the operation and its level of risk in order to make the most effective use of public funds . in the context of their evaluation of applications for support by the european structural and investment funds , member states should have regard to the evaluations of operations relating to their specific member state that have been submitted for cef but not selected , without prejudice to the final selection decision by the managing authority .


### ipa , eni and edf member states and the commission shall seek to increase coordination between external instruments and the csf funds to improve effectiveness in achieving multiple union policy objectives . coordination and complementarities with the european development fund , the pre accession instrument and the european neighbourhood instrument is particularly important . 2 . to support deeper territorial integration , member states shall seek to capitalise on synergies between territorial cooperation activities under cohesion policy and the european neighbourhood instruments , in particular with regard to cross border cooperation activities . member states shall also , where appropriate , ensure that existing activities are associated with newly created european groupings of territorial cooperation , having special regard to coordination and exchange of best practices . ### 9 ipa , eni and edf member states and the commission shall , in accordance with their respective responsibilities , seek to increase coordination between external instruments and the european structural and investment funds to improve effectiveness in achieving multiple union policy objectives . coordination and complementarities with the european development fund , the pre accession instrument and the european neighbourhood instrument is particularly important . 2 . to support deeper territorial integration , member states shall seek to capitalise on synergies between territorial cooperation activities under cohesion policy and the european neighbourhood instruments , in particular with regard to cross border cooperation activities , taking account of the potential offered by european groupings of territorial cooperation .


### horizontal principles and cross - cutting policy objectives horizontal principles 6 . 1 partnership and multi - level governance in accordance with article 5 , the principle of partnership and multi - level governance shall be respected by member states in order to facilitate achieving social , economic and territorial cohesion and delivery of the union ' s priorities of smart , sustainable and inclusive growth . this requires coordinated action carried out in accordance with the principles of subsidiarity and proportionality , and in partnership . it also shall take the form of operational and institutionalised cooperation , in particular with regard to the drawing - up and implementation of the union ' s policies . member states shall therefore make full use of the partnerships established in the framework of the csf funds . ### horizontal principles and cross - cutting policy objectives deleted 6 . 1 partnership and multi - level governance in accordance with article 5 of this regulation , the principle of partnership and multi - level governance shall be respected by member states in order to facilitate achieving social , economic and territorial cohesion and delivery of the union ' s priorities of smart , sustainable and inclusive growth . this requires coordinated action , in particular between the different levels of governance , carried out in accordance with the principles of subsidiarity and proportionality , and in partnership , including operational and institutional cooperation , with regard to the preparation and implementation of the partnership agreement and programmes . 1a . member states shall examine the need for strengthening the institutional capacity of partners in order to develop their potential in contributing to the effectiveness of the partnership .


### 2 sustainable development to ensure the full mainstreaming of sustainable development into the csf funds , and respecting the principle of sustainable development as laid down in article 3 of the treaty on european union , the obligation to integrate environmental protection requirements according to article 11 and the polluter pays principle as set out in article 192 of the treaty on the functioning of the european union , managing authorities shall undertake actions throughout the programme lifecycle , to avoid or reduce environmentally harmful effects of interventions and ensure results in net social , environmental and climate benefits by the following actions : directing investments towards the most resource - efficient and sustainable options , avoiding investments that may have a significant negative environmental or climate impact , and supporting actions to mitigate any remaining impacts , taking a long - term perspective when ‘ life - cycle’ costs of alternative options for investment are compared , increasing the use of green public procurement . 2 . member states shall ensure that investments made with the support of the csf funds consider climate change mitigation potential , as well as be resilient to the impact of climate change and natural disasters such as increased risks of flooding , heat waves and extreme weather events . 3 . member states shall track biodiversity related expenditure using the methodology based on the categories of intervention or measures adopted by the commission . 4 . investments also need to be consistent with the water hierarchy , with a focus on demand management options with alternative supply options only to be considered when the potential for water savings and efficiency has been exhausted . public intervention in the waste management sector shall complement efforts by the private sector , in particular producer responsibility . actions should support innovative approaches that promote a closed - loop economy and need to be consistent with the waste hierarchy . ### 2 sustainable development member states and managing authorities shall , in all phases of implementation , ensure the full mainstreaming of sustainable development into the european structural and investment funds , respecting the principle of sustainable development as laid down in article 3 of the treaty on european union , as well as the obligation to integrate environmental protection requirements according to article 11 and the polluter pays principle as set out in article 192 of the treaty on the functioning of the european union . managing authorities shall undertake actions throughout the programme lifecycle , to avoid or reduce environmentally harmful effects of interventions and ensure results in net social , environmental and climate benefits . actions to be undertaken may include the following : directing investments towards the most resource - efficient and sustainable options , avoiding investments that may have a significant negative environmental or climate impact , and supporting actions to mitigate any remaining impacts , taking a long - term perspective when ‘ life - cycle’ costs of alternative options for investment are compared , increasing the use of green public procurement . 2 . member states shall take into consideration the climate change mitigation and adaptation potential of investments made with the support of the european structural and investment funds , in accordance with article 8 of this regulation , and ensure that they are resilient to the impact of climate change and natural disasters such as increased risks of flooding , droughts , heat waves , forest fires and extreme weather events . deleted 4 . investments shall be consistent with the water management hierarchy , with a focus on demand management options . alternative supply options shall only be considered when the potential for water savings and efficiency has been exhausted . public intervention in the waste management sector shall complement efforts by the private sector , in particular in relation to producer responsibility . investments shall encourage innovative approaches that promote high levels of recycling . investments shall be consistent with the waste hierarchy established under directive 2008 / 98 / ec . expenditure related to biodiversity and the protection of natural resources shall be consistent with the habitats directive .


### 3 promotion of equality between men and women and non - discrimination in accordance with article 7 , member states shall pursue the objective of equality between men and women and must take appropriate steps to prevent any discrimination and to ensure accessibility during the preparation , implementation , monitoring and evaluation of operations in the programmes co - financed by the csf funds . when pursuing the objectives of article 7 , member states shall describe in detail actions to be taken , in particular with regard to selection of operations , setting of objectives for interventions , and arrangements for monitoring and reporting . member states shall also carry out gender analyses where appropriate . 2 . member states shall ensure the participation of the relevant bodies responsible for promoting gender equality , non - discrimination and accessibility in the partnership , and ensure adequate structures in accordance with national practices to advise on gender equality , non - discrimination and accessibility in order to provide the necessary expertise in the preparation , monitoring and evaluation of the csf funds . the composition of the monitoring committees shall be gender balanced and include a gender expertise / responsibility function . 3 . managing authorities shall regularly undertake specific evaluations or self - assessment exercises , in coordination with the monitoring committees , focusing on the application of the gender mainstreaming principle . 4 . member states shall address , in an appropriate manner , the needs of disadvantaged groups in order to allow them to better integrate into the labour market , and to fully participate in society . ### 3 promotion of equality between men and women and non - discrimination in accordance with article 7 of this regulation , member states and the commission shall pursue the objective of equality between men and women and shall take appropriate steps to prevent any discrimination during the preparation , implementation , monitoring and evaluation of operations in the programmes co - financed by the european structural and investment funds . when pursuing the objectives of article 7 of this regulation , member states shall describe actions to be taken , in particular with regard to selection of operations , setting of objectives for interventions , and arrangements for monitoring and reporting . member states shall also carry out gender analyses where appropriate . in particular , specific targeted actions shall be supported through the esf . 2 . member states shall ensure , in accordance with articles 5 and 7 of this regulation , the participation of the relevant bodies responsible for promoting gender equality and non - discrimination in the partnership , and ensure adequate structures in accordance with national practices to advise on gender equality , non - discrimination and accessibility in order to provide the necessary expertise in the preparation , monitoring and evaluation of the european structural and investment funds . 3 . managing authorities shall undertake evaluations or self - assessment exercises , in coordination with the monitoring committees , focusing on the application of the gender mainstreaming principle . 4 . member states shall address , in an appropriate manner , the needs of disadvantaged groups in order to allow them to better integrate into the labour market , and thereby facilitate their full participation in society .


### cross - cutting policy objectives 6 . 4 accessibility managing authorities shall ensure that all products , goods , services and infrastructures that are open or provided to the public and are co - financed by the csf funds are accessible to all citizens including those with disabilities . in particular , accessibility to the physical environment , transport , information and communication technologies in order to achieve inclusion for disadvantaged groups , including persons with disabilities has to be ensured . managing authorities shall undertake actions throughout the programme lifecycle to identify and remove existing accessibility barriers or prevent new ones . ### deleted 6 . 4 accessibility member states and the commission shall take appropriate steps to prevent any discrimination based on disability in accordance with article 7 of this regulation . managing authorities shall ensure by means of action throughout the programme lifecycles that all products , goods , services and infrastructures that are open or provided to the public and are co - financed by the european structural and investment funds are accessible to all citizens including those with disabilities in accordance with applicable union and national law , thereby contributing to a barrier - free environment for persons with disabilities and the elderly . in particular , accessibility to the physical environment , transport , information and communication technologies in order to promote inclusion of disadvantaged groups , including persons with disabilities , shall be ensured . actions to be undertaken may include directing investments towards accessibility in existing buildings and established services .


### 5 addressing demographic change the challenges resulting from demographic change shall be taken into account at all levels . member states shall therefore make use of the csf funds to develop tailor - made strategies , where appropriate , to tackle demographic problems and to create growth linked to an ageing society . 2 . member states shall use the csf funds to take action to facilitate inclusion of all age groups . they shall in particular enhance job opportunities for the elderly and young people . investments in health infrastructures shall serve the goal of a long and healthy working life for all of the union’s citizens . 3 . in the regions most affected by demographic change , member states shall identify measures to : support demographic renewal through better conditions for families and an improved balance between working and family life ; boost employment , raise productivity and economic performance through investing in education , ict and research ; focus on the adequacy and quality of education and social support structures ; and ensure cost - effective provision of health care and long - term care including investment in e - health , e - care and infrastructure . ### 5 addressing demographic change the challenges resulting from demographic change , including in particular those related to a shrinking working population , an increasing proportion of retired people and depopulation , shall be taken into account at all levels . member states shall make use of the european structural and investment funds , in line with relevant national or regional strategies , where such strategies are in place , to tackle demographic problems and to create growth linked to an ageing society . 2 . member states shall use the european structural and investment funds , in line with relevant national or regional strategies to facilitate inclusion of all age groups , including through improved access to education and social support structures with a view to enhancing job opportunities for the elderly and young people with a focus on regions with high rates of youth unemployment in comparison to the union average rate . investments in health infrastructures shall serve the goal of a long and healthy working life for all of the union’s citizens . 3 . to address challenges in the regions most affected by demographic change , member states shall in particular identify measures to : support demographic renewal through better conditions for families and an improved balance between working and family life ; boost employment , raise productivity and economic performance through investing in education , ict and research and innovation ; focus on the adequacy and quality of education , training and social support structures as well as where appropriate , on the efficiency of social protection systems ; promote cost - effective provision of health care and long - term care including investment in e - health , e - care and infrastructure .


### 6 climate change mitigation and adaptation climate change mitigation and adaptation and risk prevention shall be integrated in the preparation , programming , implementation , monitoring and evaluation of all funds . the visibility of contributions towards the goal of a spending of at least 20% of the union budget on climate change mitigation shall be ensured . ### 6 climate change mitigation and adaptation in accordance with article 8 of this regulation climate change mitigation and adaptation and risk prevention shall be integrated in the preparation and implementation of partnership agreements and programmes .


### arrangements to address territorial challenges 7 . 1 member states and regions shall undertake the following steps for the purpose of preparation of their partnership contracts and programmes : an analysis of the member state ' s or region ' s development potential and capacity , particularly in relation to the key challenges identified in europe 2020 , the national reform programmes and the relevant country - specific recommendations . the responsible authorities shall undertake a detailed analysis of national , regional and local characteristics ; an assessment of the major challenges to be addressed by the region or member state , the identification of the bottlenecks and missing links , innovation gaps , including the lack of planning and implementation capacity that inhibit the long - term potential for growth and jobs . this shall form the basis for the identification of the possible fields and activities for policy prioritisation , intervention and concentration ; an assessment of the cross - sectoral , cross - jurisdictional or cross - border coordination challenges , particularly in the context of macro - regional and sea - basin strategies ; identification of steps to achieve improved coordination across different territorial levels and sources of funding to deliver an integrated approach linking europe 2020 with regional and local actors . 7 . 2 in order to take into account the objective of territorial cohesion , the member states and regions shall ensure that the overall approach to promoting smart , sustainable and inclusive growth : reflects the role of cities , rural areas fisheries and coastal areas , areas facing specific geographical or demographic problems ; takes account of the specific challenges of the outermost regions , the northernmost regions with a very low population density and of island , cross - border or mountain regions ; addresses urban - rural linkages , in terms of access to affordable , quality infrastructures and services , and problems in regions with a high concentration of socially marginalised communities . ### arrangements for addressing key territorial challenges - 7 . 1 member states shall take account of geographic or demographic features and take steps to address the specific territorial challenges of each region to unlock their specific development potential , thereby also helping them to achieve smart , sustainable and inclusive growth in the most efficient way . - 7 . 1a . the choice and combination of thematic objectives , as well as the selection of corresponding investment and union priorities and the specific objectives set shall reflect the needs and potential for smart , sustainable and inclusive growth of each member state and region . - 7 . 1b . when preparing partnership agreements and programmes member states shall therefore take into consideration that the major societal challenges faced by the european union today – globalisation , demographic change , environmental degradation , migration , climate change , energy use , the economic and social consequences of the crisis – may have different impacts in different regions . 7 . 1 with a view to an integrated territorial approach to addressing territorial challenges member states shall ensure that programmes under the european structural and investment funds reflect the diversity of european regions , in terms of employment and labour market characteristics , interdependencies between different sectors , commuting patterns , population ageing and demographic shifts , cultural , landscape and heritage features , climate change vulnerabilities and impacts , land use and resource constraints , potential for more sustainable use of natural resources including renewables , institutional and governance arrangements , connectivity and accessibility , and linkages between rural and urban areas . in accordance with article 14 of this regulation , member states and regions shall therefore undertake the following steps for the purpose of preparation of their partnership agreements and programmes : an analysis of the member state ' s or region ' s characteristics , development potential and capacity , particularly in relation to the key challenges identified in europe 2020 , the national reform programmes , where appropriate , the relevant country - specific recommendations adopted in accordance with article 121 of the treaty on the functioning of the european union and relevant council recommendations adopted in accordance with article 148 of the treaty on the functioning of the european union ; an assessment of the major challenges to be addressed by the region or member state , the identification of the bottlenecks and missing links , innovation gaps , including the lack of planning and implementation capacity that inhibit the long - term potential for growth and jobs . this shall form the basis for the identification of the possible fields and activities for policy prioritisation , intervention and concentration ; an assessment of the cross - sectoral , cross - jurisdictional or cross - border coordination challenges , particularly in the context of macro - regional and sea - basin strategies ; identification of steps to achieve improved coordination across different territorial levels , taking account of the appropriate territorial scale and context for policy design as well as member states ' institutional and legal framework , and sources of funding to deliver an integrated approach linking europe 2020 with regional and local actors . 7 . 2 . in order to take into account the objective of territorial cohesion , the member states and regions shall , in particular , ensure that the overall approach to promoting smart , sustainable and inclusive growth in the areas concerned : reflects the role of cities , urban and rural areas , fisheries and coastal areas , and areas facing specific geographical or demographic handicaps ; takes account of the specific challenges of the outermost regions , the northernmost regions with a very low population density and of island , cross - border or mountain regions ; addresses urban - rural linkages , in terms of access to affordable , high quality infrastructure and services , and problems in regions with a high concentration of socially marginalised communities .


### the performance framework shall consist of milestones established for each priority for the years 2016 and 2018 and targets established for 2022 . the milestones and targets shall be presented in accordance with the format set out in table 1 . ### the performance framework shall consist of milestones established for each priority for two specific years of the programme period , preceding the years of the performance review to be mutually agreed by the member state and the commission , and targets established for 2022 . the milestones and targets shall be presented in accordance with the format set out in table 1 .


### milestones are intermediate targets for the achievement of the specific objective of a priority , expressing the intended progress towards the targets set for the end of the period . milestones established for 2016 shall include financial indicators and output indicators . milestones established for 2018 shall include financial indicators , output indicators and where appropriate , result indicators . milestones may also be established for key implementation steps . ### milestones are intermediate targets for the achievement of the specific objective of a priority expressing the intended progress towards the targets set for the end of the period . milestones established for the year preceding the year of the first performance review shall include financial indicators and output indicators . milestones established for the year preceing the year of the second performance review shall include financial indicators and output indicators . milestones may also be established for key implementation steps .


### method for establishing the performance framework the performance framework shall consist of milestones established for each priority for the years 2016 and 2018 and targets established for 2022 . the milestones and targets shall be presented in accordance with the format set out in table 1 . 2 . milestones are intermediate targets for the achievement of the specific objective of a priority , expressing the intended progress towards the targets set for the end of the period . milestones established for 2016 shall include financial indicators and output indicators . milestones established for 2018 shall include financial indicators , output indicators and where appropriate , result indicators . milestones may also be established for key implementation steps . 3 . milestones shall be : – relevant , capturing essential information on the progress of a priority ; – transparent , with objectively verifiable targets and the source data identified and publicly available ; – verifiable , without imposing a disproportionate administrative burden ; – consistent across operational programmes , where appropriate . ### method for establishing the performance framework the performance framework shall consist of milestones established for each priority for the year 2018 and targets established for 2022 . the milestones and targets shall be presented in accordance with the format set out in table 1 . 2 . milestones are intermediate targets , directly linked to the achievement of the specific objective of a priority , expressing the intended progress towards the targets set for the end of the period . milestones established for 2018 shall include financial indicators , output indicators and where appropriate , result indicators , which are closely linked to the supported policy interventions . result indicators shall not be taken into account for the purposes of article 20 and article 20 . milestones may also be established for key implementation steps . 3 . milestones and targets shall be – realistic , achievable , relevant , capturing essential information on the progress of a priority ; – consistent with the nature and character of the specific objectives of the priority ; – transparent , with objectively verifiable targets and the source data identified and , where possible , publicly available ; – verifiable , without imposing a disproportionate administrative burden ; – consistent across operational programmes , where appropriate . 3 a . in duly justified cases , such as a significant change in the economic , environmental and labour market conditions in a member state or region , and in addition to amendments resulting from changes in allocations for a given priority , the member state may propose the revision of milestones and targets in accordance with article 26 of this regulation .


### the number of young unemployed persons between the ages of 15 - 24 shall be identified in the nuts 2 level regions that have youth unemployment rates of more than 25% in 2012 . ### the number of young unemployed persons under the age of 30 shall be identified in the nuts 2 level regions that have youth unemployment rates of more than 20 % in 2012 , or in subregions that have youth unemployment rates of more than 22 . 5 % in 2012 .


### once there is agreement by the commission and the member state , table 1 above will be included in the partnership contract of the member state concerned as the reference level of the public or equivalent structural expenditure to be maintained in the years 2014 - 2020 . ### once there is agreement by the commission and the member state , table 1 and table 2 , where applicable , above will be included in the partnership agreement of the member state concerned as the reference level of the public or equivalent structural expenditure to be maintained in the years 2014 - 2020 .


### following the mid - term verification , the commission may revise , in consultation with a member state , the reference level of public or equivalent structural expenditure in the partnership contract if the economic situation of the member state has significantly changed since adoption of the partnership contract and the change was not taken into account when setting the reference level in the partnership contract . ### following the mid - term verification , the commission may revise , in consultation with a member state , the reference level of public or equivalent structural expenditure in the partnership agreement if the economic situation of the member state has significantly changed from the one estimated at the time of adoption of the partnership agreement .


### the list of operations referred to article 105 shall contain , in at least one of the official languages of the member state , the following data fields : ### the list of operations referred to in article 105 shall contain , in at least one of the official languages of the member state , the following data fields :


### - operation postcode ; ### - operation postcode ; or other appropriate location indicator ;


### - name of category of intervention for the operation ; ### - name of category of intervention for the operation in accordance with article 87 ;


### the headings of the data fields and the names of the operations shall be also provided in at least one other official language of the european union . ### the headings of the data fields shall be also provided in at least one other official language of the european union .


### information and publicity measures for the public ### information and communication measures for the public


### the member state , the managing authority and the beneficiaries shall take the steps necessary to provide information and publicity to the public on operations supported by an operational programme in accordance with this regulation . ### the member state , the managing authority and the beneficiaries shall take the steps necessary to provide information and communication to the public on operations supported by an operational programme in accordance with this regulation .


### the member state and the managing authority shall ensure that the information and publicity measures are implemented in accordance with the communication strategy and that these measures aim at the widest possible media coverage using various forms and methods of communication at the appropriate level . ### the member state and the managing authority shall ensure that the information and communication measures are implemented in accordance with the communication strategy and that these measures aim at the widest possible media coverage using various forms and methods of communication at the appropriate level .


### the member state or the managing authority shall be responsible for organising at least the following information and publicity measures : a major information activity publicising the launch of the operational programme ; at least one major information activity a year which promotes the funding opportunities and the strategies pursued and presents the achievements of the operational programme , including , where relevant , major projects , joint action plans and other project examples ; displaying the flag of the european union in front of , or at a place visible to the public , at the premises of each managing authority ; publishing electronically the list of operations in accordance with section 1 ; giving examples of operations , by operational programme , on the single website or on the operational programme ' s website that is accessible through the single website portal ; the examples should be in a widely spoken official language of the european union other than the official language or languages of the member state concerned ; updating information about the operational programme ' s implementation , including its main achievements , on the single website or on the operational programme ' s website that is accessible through the single website portal . ### the member state or the managing authority shall be responsible for organising at least the following information and communication measures : a major information activity publicising the launch of the operational programme , even prior to the approval of the revelant communication strategies ; one major information activity a year which promotes the funding opportunities and the strategies pursued and presents the achievements of the operational programme , including , where relevant , major projects , joint action plans and other project examples ; displaying the emblem of the european union at the premises of each managing authority ; publishing electronically the list of operations in accordance with section 1 ; giving examples of operations , by operational programme , on the single website or on the operational programme ' s website that is accessible through the single website portal ; the examples should be in a widely spoken official language of the european union other than the official language or languages of the member state concerned ; updating information about the operational programme ' s implementation , including , when appropriate , its main achievements , on the single website or on the operational programme ' s website that is accessible through the single website portal .


### information centres on europe , as well as commission representation offices in the member states ; ### information centres on europe , as well as commission representation offices , and information offices of the european parliament in the member states , and other appropriate information networks , where available ;


### the managing authority shall involve in information and publicity measures , in accordance with national laws and practices , the following bodies : the partners referred to in article 5 ; information centres on europe , as well as commission representation offices in the member states ; educational and research institutions . these bodies shall widely disseminate the information described in article 105 and . ### the managing authority shall involve in information and communication measures , in accordance with national laws and practices , the following bodies where appropriate : the partners referred to in article 5 ; information centres on europe , as well as commission representation offices , and information offices of the european parliament in the member states ; educational and research institutions . these bodies shall widely disseminate the information described in article 105 .


### providing on the beneficiary ' s website , where such a website exists , a short description of the operation , including its aims and results , and highlighting the financial support from the european union ; ### providing on the beneficiary ' s website , where such a website exists , a short description of the operation , proportionate to the level of support , including its aims and results , and highlighting the financial support from the european union ;


### placing at least one poster with information about the project , including the financial support from the european union , at a location readily visible to the public , such as the entrance area of a building . ### placing , for operations not falling under paragraphs 4 and 5 , at least one poster with information about the project , including the financial support from the european union , at a location readily visible to the public , such as the entrance area of a building .


### for operations supported by the esf , and in appropriate cases for operations supported by the erdf or cohesion fund , the beneficiary shall ensure that those taking part in an operation have been informed of this funding . any document , including any attendance or other certificate , concerning such an operation shall include a statement to the effect that the operational programme was supported by the fund or funds . ### for operations supported by the esf , and in appropriate cases for operations supported by the erdf or cohesion fund , the beneficiary shall ensure that those taking part in an operation have been informed of this funding . any document , relating to the implementation of an operation which is used for the public or for participants , including any attendance or other certificate , shall include a statement to the effect that the operational programme was supported by the fund or funds .


### no later than three months after completion of an operation , the beneficiary shall put up a permanent plaque or billboard of significant size at a location readily visible to the public for each operation that fulfils the following criteria : the total public support to the operation exceeds eur 500 000 ; the operation consists in the purchase of a physical object or in the financing of infrastructure or of construction operations . the plaque or billboard shall state the type , name and purpose of the operation and shall be prepared in accordance with the technical characteristics adopted by the commission in accordance with article 105 . ### no later than three months after completion of an operation , the beneficiary shall put up a permanent plaque or billboard of significant size at a location readily visible to the public for each operation that fulfils the following criteria : the total public support to the operation exceeds eur 500 000 ; b ) the operation consists in the purchase of a physical object or in the financing of infrastructure or of construction operations . the plaque or billboard shall state the name and the main objective of the operation . it shall be prepared in accordance with the technical characteristics adopted by the commission in accordance with article 105 .


### information measures for potential beneficiaries and beneficiaries ### does not affect english version .


### the managing authority shall ensure that potential beneficiaries are informed on at least the following : the conditions of eligibility of expenditure to be met in order to qualify for support under an operational programme ; a description of the procedures for examining applications for funding and of the time periods involved ; the criteria for selecting the operations to be supported ; the contacts at national , regional or local level that are able to provide information on the operational programmes ; that applications should propose communication activities , proportional to the size of the operation , in order to inform the public about the operation ' s aims and the eu support to the operation . ### the managing authority shall ensure that potential beneficiaries have access to the relevant information , including updated information where necessary , and taking into account the accessibility of electronic or other communication services for certain potential beneficiaries , on at least the following : the funding opportunities and the launching of application calls ; the conditions of eligibility of expenditure to be met in order to qualify for support under an operational programme ; a description of the procedures for examining applications for funding and of the time periods involved ; the criteria for selecting the operations to be supported ; the contacts at national , regional or local level that are able to provide information on the operational programmes ; the responsibility of potential beneficiaries to inform the public about the aim of the operation and the support from the funds to the operation in accordance to point 2 . 2 above . the managing authority may request potential beneficiaries to propose indicative communication activities , proportional to the size of the operation , in the applications .


### information measures for beneficiaries the managing authority shall inform beneficiaries that acceptance of funding constitutes an acceptance of their inclusion in the list of operations published in accordance with article 105 . 2 . the managing authority shall provide information and publicity kits , including templates in electronic format , to help beneficiaries to meet their obligations set out in section 2 . 2 . ### information measures for beneficiaries the managing authority shall inform beneficiaries that acceptance of funding constitutes an acceptance of their inclusion in the list of operations published in accordance with article 105 . 2 . the managing authority shall provide information and communication tools , including templates in electronic format , to help beneficiaries to meet their obligations set out in section 2 . 2 , where appropriate .


### the communication strategy drawn up by the managing authority shall include at least the following elements : a description of the approach taken , including the main information and publicity measures to be taken by the member state or the managing authority aimed at potential beneficiaries , beneficiaries , multipliers and the wider public , having regard to the aims described in article 105 ; a description of materials that will be made available in formats accessible for people with disabilities ; a description of how beneficiaries will be supported in their communication activities ; the indicative budget for implementation of the strategy ; a description of the administrative bodies , including the staff resources , responsible for implementing the information and publicity measures ; the arrangements for the information and publicity measures referred to in section 2 , including the website or website portal at which such data may be found ; an indication of how the information and publicity measures shall be assessed in terms of visibility and awareness of policy , operational programmes and operations , and of the role played by the funds and the european union ; where appropriate , a description of the use of the main results of the previous operational programme ; an annual update setting out the information and communication activities to be carried out . ### the communication strategy drawn up by the managing authority and , where appropriate , by the member state shall include , the following elements : a description of the approach taken , including the main information and communication measures to be taken by the member state or the managing authority aimed at potential beneficiaries , beneficiaries , multipliers and the wider public , having regard to the aims described in article 105 ; a description of materials that will be made available in formats accessible for people with disabilities ; a description of how beneficiaries will be supported in their communication activities ; the indicative budget for implementation of the strategy ; a description of the administrative bodies , including the staff resources , responsible for implementing the information and communication measures ; the arrangements for the information and communication measures referred to in section 2 , including the website or website portal at which such data may be found ; an indication of how the information and communication measures shall be assessed in terms of visibility and awareness of policy , operational programmes and operations , and of the role played by the funds and the european union ; where appropriate , a description of the use of the main results of the previous operational programme ; an annual update setting out the information and communication activities to be carried out in the following year .


### network and information systems and services play a vital role in the society . their reliability and security are essential to economic activities and social welfare , and in particular to the functioning of the internal market . ### network and information systems and services play a vital role in the society . their reliability and security are essential to the freedom and overall security for the citizens of the eu as well as to economic activities and social welfare , and in particular to the functioning of the internal market .


### the magnitude and frequency of deliberate or accidental security incidents is increasing and represents a major threat to the functioning of networks and information systems . such incidents can impede the pursuit of economic activities , generate substantial financial losses , undermine user confidence and cause major damage to the economy of the union . ### the magnitude and frequency of deliberate or accidental security incidents is increasing drastically and represents a major threat to the functioning of networks and information systems . such incidents can impede the pursuit of economic activities , generate substantial financial losses , undermine user confidence and impinge on their private lives , result in a violation of the fundamental rights and freedoms of eu citizens and cause major damage to the economy of the union .


### the magnitude and frequency of deliberate or accidental security incidents is increasing and represents a major threat to the functioning of networks and information systems . such incidents can impede the pursuit of economic activities , generate substantial financial losses , undermine user confidence and cause major damage to the economy of the union . ### the magnitude , frequency and impact of security incidents is increasing and represents a major threat to the functioning of networks and information systems . these systems may also become an easy target for deliberate harmful actions intended to damage or interrupt the operation of the systems . such incidents can threaten the health and safety of the population , impede the pursuit of economic activities , generate substantial financial losses , undermine user and investor confidence and cause major damage to the economy of the union .


### a cooperation mechanism should be established at union level to allow for information exchange and coordinated detection and response regarding network and information security . for that mechanism to be effective and inclusive , it is essential that all member states have minimum capabilities and a strategy ensuring a high level of nis in their territory . minimum security requirements should also apply to public administrations and operators of critical information infrastructure to promote a culture of risk management and ensure that the most serious incidents are reported . ### a cooperation mechanism should be established at union level to allow for information exchange and coordinated prevention , detection and response regarding network and information security . for that mechanism to be effective and inclusive , it is essential that all member states have minimum capabilities and a strategy ensuring a high level of nis in their territory . minimum security requirements should also apply to public and private operators of information infrastructure and companies listed on the stock markets to promote a culture of risk management and ensure that the most serious incidents are reported . the legal framework should be based upon the need to safeguard the privacy and integrity of citizens . the critical infrastructure warning information network should be expanded to these particular operators .


### the existing capabilities are not sufficient enough to ensure a high level of nis within the union . member states have very different levels of preparedness leading to fragmented approaches across the union . this leads to an unequal level of protection of consumers and businesses , and undermines the overall level of nis within the union . lack of common minimum requirements on public administrations andmarket operators in turn makes it impossible to set up a global and effective mechanism for cooperation at union level . ### the existing capabilities are not sufficient enough to ensure a high level of nis within the union . member states have very different levels of preparedness leading to fragmented approaches across the union . this leads to an unequal level of protection of consumers and businesses , and undermines the overall level of nis within the union . lack of common minimum requirements on market operators in turn makes it impossible to set up a global and effective mechanism for cooperation at union level , damaging in addition the effectiveness of international cooperation and consequently the fight against global security challenges , and undermines the union ' s leading position internationally in safeguarding and promoting an open , efficient and secure internet .


### responding effectively to the challlenges of the security of network and information systems therefore requires a global approach at union level covering common minimum capacity building and planning requirements , exchange of information and coordination of actions , and common minimum security requirements for all market operators concerned and public administrations . ### responding effectively to the challenges of the security of network and information systems therefore requires a global approach at union level covering common minimum capacity building and planning requirements , exchange of information and coordination of actions , and common minimum security requirements for all market operators concerned .


### responding effectively to the challenges of the security of network and information systems therefore requires a global approach at union level covering common minimum capacity building and planning requirements , exchange of information and coordination of actions , and common minimum security requirements for all market operators concerned and public administrations . ### responding effectively to the challenges of the security of network and information systems therefore requires a global approach at union level covering common minimum capacity building and planning requirements , developing sufficient cybersecurity skills , exchange of information and coordination of actions , and common minimum security requirements . minimal common standards should be applied in accordance with appropriate recommendations by the cyber security co - ordination groups .


### the provisions of this directive should be without prejudice to the possibility for each member state to take the necessary measures to ensure the protection of its essential security interests , to safeguard public policy and public security , and to permit the investigation , detection and prosecution of criminal offences . in accordance with article 346 tfeu , no member state is to be obliged to supply information the disclosure of which it considers contrary to the essential interests of its security . ### the provisions of this directive should be without prejudice to the possibility for each member state to take the necessary measures to ensure the protection of its essential security interests , to safeguard public policy and public security , and to permit the investigation , detection and prosecution of criminal offences . in accordance with article 346 tfeu , no member state is to be obliged to supply information the disclosure of which it considers contrary to the essential interests of its security . no member states is obliged to disclose eu classified information according to council decision of 31 march 2011 on the security rules for protecting eu classified information , information subject to non - disclosure agreements or informal non - disclosure agreements , such as the traffic light protocol .


### to achieve and maintain a common high level of security of network and information systems , each member state should have a national nis strategy defining the strategic objectives and concrete policy actions to be implemented . nis cooperation plans complying with essential requirements need to be developed at national level in order to reach capacity response levels allowing for effective and efficient cooperation at national and union level in case of incidents . ### to achieve and maintain a common high level of security of network and information systems , each member state should have a national nis strategy defining the strategic objectives and concrete policy actions to be implemented . nis cooperation plans complying with essential requirements need to be developed at national level , on the basis of minimum requirements set in this directive , in order to reach capacity response levels allowing for effective and efficient cooperation at national and union level in case of incidents . each member state should therefore be obliged to meet common standards regarding data format and the exchangeability of data to be shared and evaluated . member states may ask for the assistance of the european network and information security agency in developing their national nis strategies , based on a common minimum nis strategy blueprint .


### all member states should be adequately equipped , both in terms of technical and organisational capabilities , to prevent , detect , respond to and mitigate network and information systems ' incidents and risks . well - functioning computer emergency response teams complying with essential requirements should therefore be established in all member states to guarantee effective and compatible capabilities to deal with incidents and risks and ensure efficient cooperation at union level . ### all member states and market operators should be adequately equipped , both in terms of technical and organisational capabilities , to prevent , detect , respond to and mitigate network and information systems ' incidents and risks at any moment . security systems of public administrations must be safe and subject to democratic control and scrutiny . commonly required equipment and capabilities ought to comply with commonly agreed technical standards as well as standards procedures of operation . well - functioning computer emergency response teams complying with essential requirements should therefore be established in all member states to guarantee effective and compatible capabilities to deal with incidents and risks and ensure efficient cooperation at union level . these certs should be enabled to interact on the basis of common technical standards and spo . in view of the different characteristics of existing certs , which responds to different subject needs and actors , member states should guarantee that each of the sectors covered by annex ii is provided services by at least one cert . regarding cross border cert cooperation , member states should assure that certs have sufficient means to participate in the existing international and european cooperation networks already in place .


### building upon the significant progress within the european forum of member states in fostering discussions and exchanges on good policy practices including the development of principles for european cyber crisis cooperation , the member states and the commission should form a network to bring them into permanent communication and support their cooperation . this secure and effective cooperation mechanism should enable structured and coordinated information exchange , detection and response at union level . ### building upon the significant progress within the european forum of member states in fostering discussions and exchanges on good policy practices including the development of principles for european cyber crisis cooperation , the member states and the commission should form a network to bring them into permanent communication and support their cooperation . this secure and effective cooperation mechanism , where the participation of market operators is assured , should enable structured and coordinated information exchange , detection and response at union level .


### the european network and information security agency should assist the member states and the commission by providing its expertise and advice and by facilitating exchange of best practices . in particular , in the application of this directive , the commission should consult enisa . to ensure effective and timely information to the member states and the commission , early warnings on incidents and risks should be notified within the cooperation network . to build capacity and knowledge among member states , the cooperation network should also serve as an instrument for the exchange of best practices , assisting its members in building capacity , steering the organisation of peer reviews and nis exercises . ### the european network and information security agency should assist the member states and the commission by providing its expertise and advice and by facilitating exchange of best practices . in particular , in the application of this directive , the commission and member states should consult enisa . to ensure effective and timely information to the member states and the commission , early warnings on incidents and risks should be notified within the cooperation network . to build capacity and knowledge among member states , the cooperation network should also serve as an instrument for the exchange of best practices , assisting its members in building capacity , steering the organisation of peer reviews and nis exercises .


### a secure information - sharing infrastructure should be put in place to allow for the exchange of sensitive and confidential information within the cooperation network . without prejudice to their obligation to notify incidents and risks of union dimension to the cooperation network , access to confidential information from other member states should only be granted to members states upon demonstration that their technical , financial and human resources and processes , as well as their communication infrastructure , guarantee their effective , efficient and secure participation in the network . ### a secure information - sharing infrastructure should be put in place , under the supervision of enisa , to allow for the exchange of sensitive and confidential information within the cooperation network . without prejudice to their obligation to notify incidents and risks of union dimension to the cooperation network , access to confidential information from other member states should only be granted to members states upon demonstration that their technical , financial and human resources and processes , as well as their communication infrastructure , guarantee their effective , efficient and secure participation in the network . in order for the cooperation network to be able to efficiently fulfil its mission , the commission should establish a budget line for the network .


### as most network and information systems are privately operated , cooperation between the public and private sector is essential . market operators should be encouraged to pursue their own informal cooperation mechanisms to ensure nis . they should also cooperate with the public sector and share information and best practices in exchange of operational support in case of incidents . ### as most network and information systems are privately operated , cooperation between the public and private sector is essential . market operators should be encouraged to pursue their own informal cooperation mechanisms to ensure nis . they should also cooperate with the public sector and mutually share information and best practices including the reciprocal in exchange of relevant information and operational support and strategically analysed information , in case of incidents . to effectively encourage the sharing of information and of best practices , it is essential to ensure that market operators , who participate in such exchanges , are not disadvantaged as a result of their cooperation . adequate safeguards are needed to ensure that such cooperation will not expose these operators to higher compliance risk or new liabilities under , inter alia , competition , intellectual property , data protection or cybercrime law , nor expose them to increase operational or security risks .


### on the basis in particular of national crisis management experiences and in cooperation with enisa , the commission and the member states should develop a union nis cooperation plan defining cooperation mechanisms to counter risks and incidents . that plan should be duly taken into account in the operation of early warnings within the cooperation network . ### on the basis in particular of national crisis management experiences and in cooperation with enisa , the commission and the member states should develop a union nis cooperation plan defining cooperation mechanisms , best practices and operation patterns to prevent , detect , report , and counter risks and incidents . that plan should be duly taken into account in the operation of early warnings within the cooperation network .


### responsibilities in ensuring nis lie to a great extent on public administrations and market operators . a culture of risk management , involving risk assessment and the implementation of security measures appropriate to the risks faced should be promoted and developed through appropriate regulatory requirements and voluntary industry practices . establishing a level playing field is also essential to the effective functioning of the cooperation network to ensure effective cooperation from all member states . ### responsibilities in ensuring nis lie to a great extent on public administrations and market operators . a culture of risk management , close cooperation and trust , involving risk assessment and the implementation of security measures appropriate to the risks faced should be promoted and developed through appropriate regulatory requirements and voluntary industry practices . establishing a trustworthy level playing field is also essential to the effective functioning of the cooperation network to ensure effective cooperation from all member states .


### those obligations should be extended beyond the electronic communications sector to key providers of information society services , as defined in directive 98 / 34 / ec of the european parliament and of the council of 22 june 1998 laying down a procedure for the provision of information in the field of technical standards and regulations and of rules on information society services27 , which underpin downstream information society services or on - line activities , such as e - commerce platforms , internet payment gateways , social networks , search engines , cloud computing services , application stores . disruption of these enabling information society services prevents the provision of other information society services which rely on them as key inputs . software developers and hardware manufacturers are not providers of information society services and are therefore excluded . those obligations should also be extended to public administrations , and operators of critical infrastructure which rely heavily on information and communications technology and are essential to the maintenance of vital economical or societal functions such as electricity and gas , transport , credit institutions , stock exchange and health . disruption of those network and information systems would affect the internal market . __________________ 27 oj l 204 , 21 . 7 . 1998 , p . 37 . ### those obligations should be extended beyond the electronic communications sector to operators of infrastructure which rely heavily on information and communications technology and are essential to the maintenance of vital economical or societal functions such as electricity and gas , transport , credit institutions , financial market infrastructures and health . disruption of those network and information systems would affect the internal market . while the obligations set out in this directive do not extend to key providers of information society services , as defined in directive 98 / 34 / ec of the european parliament and of the council of 22 june 1998 laying down a procedure for the provision of information in the field of technical standards and regulations and of rules on information society services27 , which underpin downstream information society services or on - line activities , such as e - commerce platforms , internet payment gateways , social networks , search engines , cloud computing services in general or application stores , these may , on a voluntary basis , inform the competent authority or single point of contact of those network security incidents they deem appropriate , and the competent authority or the single point of contact should , if reasonably possible , present the market operators that informed of the incident with strategically analysed information that will help overcome the security threat . __________________ 27 oj l 204 , 21 . 7 . 1998 , p . 37 .


### technical and organisational measures imposed to public administrations and market operators should not require that a particular commercial information and communications technology product be designed , developed or manufactured in a particular manner . ### technical and organisational measures imposed to market operators should not require that a particular commercial information and communications technology product be designed , developed or manufactured in a particular manner . on the other hand , the use of international standards pertaining to cybersecurity should be required .


### the public administrations and market operators should ensure security of the networks and systems which are under their control . these would be primarily private networks and systems managed either by their internal it staff or the security of which has been outsourced . the security and notification obligations should apply to the relevant market operators and public administrations regardless of whether they perform the maintenance of their network and information systems internally or outsource it . ### the market operators should ensure security of the networks and systems which are under their control . these would be primarily private networks and systems managed either by their internal it staff or the security of which has been outsourced . the security and notification obligations should apply to the relevant market operators regardless of whether they perform the maintenance of their network and information systems internally or outsource it .


### competent authorities should pay due attention to preserving informal and trusted channels of information - sharing between market operators and between the public and the private sectors . publicity of incidents reported to the competent authorities should duly balance the interest of the public in being informed about threats with possible reputational and commercial damages for the public administrations and market operators reporting incidents . in the implementation of the notification obligations , competent authorities should pay particular attention to the need to maintain information about product vulnerabilities strictly confidential prior to the release of appropriate security fixes . ### competent authorities and single points of contact should pay due attention to preserving informal and trusted channels of information - sharing between market operators and between the public and the private sectors . previously unknown vulnerabilities or incidents reported to competent authorities should be notified to the manufacturers and service providers of affected ict products and services . publicity of incidents reported to the competent authorities and single points of contact should duly balance the interest of the public in being informed about threats with possible reputational and commercial damages for the market operators reporting incidents . in order to safeguard trust and efficiency , publicity of incidents shall only take place after consultation with those who reported the incident and only when strictly necessary for achieving the objectives of this directive . in the implementation of the notification obligations , competent authorities and single points of contact should pay particular attention to the need to maintain information about product vulnerabilities strictly confidential prior to the deployment of appropriate security fixes though not delay any notification more than compulsorily required . as a general rule , single points of contact should not disclose personal data of individuals involved in incidents . single points of contact should only disclose personal data where the disclosure of such data is necessary and proportionate in view of the objective pursued .


### competent authorities should have the necessary means to perform their duties , including powers to obtain sufficient information from market operators and public administrations in order to assess the level of security of network and information systems as well as reliable and comprehensive data about actual incidents that have had an impact on the operation of network and information systems . ### competent authorities and single points of contact should have the necessary means to perform their duties , including powers to obtain sufficient information from market operators in order to assess the level of security of network and information systems , measure the number , scale and scope of incidents , as well as reliable and comprehensive data about actual incidents that have had an impact on the operation of network and information systems .


### criminal activities are in many cases underlying an incident . the criminal nature of incidents can be suspected even if the evidence to support it may not be sufficiently clear from the start . in this context , appropriate co - operation between competent authorities and law enforcement authorities should form part of an effective and comprehensive response to the threat of security incidents . in particular , promoting a safe , secure and more resilient environment requires a systematic reporting of incidents of a suspected serious criminal nature to law enforcement authorities . the serious criminal nature of incidents should be assessed in the light of eu laws on cybercrime . ### criminal activities are in many cases underlying an incident . the criminal nature of incidents can be suspected even if the evidence to support it may not be sufficiently clear from the start . in this context , appropriate co - operation between competent authorities , the single points of contact , enisa and law enforcement authorities must form part of an effective and comprehensive response to the threat of security incidents . in particular , promoting a safe , secure and more resilient environment requires a systematic reporting of incidents of a suspected serious criminal nature to law enforcement authorities . the serious criminal nature of incidents must be assessed in the light of eu laws on cybercrime .


### criminal activities are in many cases underlying an incident . the criminal nature of incidents can be suspected even if the evidence to support it may not be sufficiently clear from the start . in this context , appropriate co - operation between competent authorities and law enforcement authorities should form part of an effective and comprehensive response to the threat of security incidents . in particular , promoting a safe , secure and more resilient environment requires a systematic reporting of incidents of a suspected serious criminal nature to law enforcement authorities . the serious criminal nature of incidents should be assessed in the light of eu laws on cybercrime . ### criminal or cyberwar activities are in many cases underlying an incident . the criminal nature of incidents can be suspected even if the evidence to support it may not be sufficiently clear from the start . in this context , appropriate co - operation between competent authorities , single points of contact and law enforcement authorities as well as cooperation with the ec3 and enisa should form part of an effective and comprehensive response to the threat of security incidents . in particular , promoting a safe , secure and more resilient environment requires a systematic reporting of incidents of a suspected serious criminal nature to law enforcement authorities . the serious criminal nature of incidents should be assessed in the light of eu laws on cybercrime .


### personal data are in many cases compromised as a result of incidents . in this context , competent authorities and data protection authorities should cooperate and exchange information on all relevant matters to tackle the personal data breaches resulting from incidents . member states shall implement the obligation to notify security incidents in a way that minimises the administrative burden in case the security incident is also a personal data breach in line with the regulation of the european parliament and of the council on the protection of individuals with regard to the processing of personal data and on the free movement of such data28 . liaising with the competent authorities and the data protection authorities , enisa could assist by developing information exchange mechanisms and templates avoiding the need for two notification templates . this single notification template would facilitate the reporting of incidents compromising personal data thereby easing the administrative burden on businesses and public administrations . __________________ 28 sec 72 final ### personal data are in many cases compromised as a result of incidents . member states and market operators should protect personal data stored , processed or transmitted against accidental or unlawful destruction , accidental loss or alteration , and unauthorised or unlawful storage , access or disclosure , dissemination , or access ; and ensure the implementation of a security policy with respect to the processing of personal data . in this context , competent authorities , single points of contact and data protection authorities should cooperate and exchange information on all relevant matters to tackle the personal data breaches resulting from incidents . the obligation to notify security incidents should be carried out in a way that minimises the administrative burden in case the security incident is also a personal data breach that is required to be notified in accordance with applicable law . enisa should assist by developing information exchange mechanisms and a single notification template that would facilitate the reporting of incidents compromising personal data thereby easing the administrative burden on businesses and public administrations .


### standardisation of security requirements is a market - driven process . to ensure a convergent application of security standards , member states should encourage compliance or conformity with specified standards to ensure a high level of security at union level . to this end , it might be necessary to draft harmonised standards , which should be done in accordance with regulation no 1025 / 2012 of the european parliament and of the council of 25 october 2012 on european standardisation , amending council directives 89 / 686 / eec and 93 / 15 / eec and directives 94 / 9 / ec , 94 / 25 / ec , 95 / 16 / ec , 97 / 23 / ec , 98 / 34 / ec , 2004 / 22 / ec , 2007 / 23 / ec , 2009 / 23 / ec and 2009 / 105 / ec of the european parliament and of the council and repealing council decision 87 / 95 / eec and decision no 1673 / 2006 / ec of the european parliament and of the council29 . __________________ 29 oj l 316 , 14 . 11 . 2012 , p . 12 . ### standardisation of security requirements is a market - driven process of a voluntary nature that should allow market operators to use alternative means to achieve at least similar outcomes . to ensure a convergent application of security standards , member states should encourage compliance or conformity with specified interoperable standards to ensure a high level of security at union level . to this end , the application of open international standards on network information security or the design of such tools need to be considered . another necessary step forward might be to draft harmonised standards , which should be done in accordance with regulation no 1025 / 2012 of the european parliament and of the council of 25 october 2012 on european standardisation , amending council directives 89 / 686 / eec and 93 / 15 / eec and directives 94 / 9 / ec , 94 / 25 / ec , 95 / 16 / ec , 97 / 23 / ec , 98 / 34 / ec , 2004 / 22 / ec , 2007 / 23 / ec , 2009 / 23 / ec and 2009 / 105 / ec of the european parliament and of the council and repealing council decision 87 / 95 / eec and decision no 1673 / 2006 / ec of the european parliament and of the council29 . in particular , etsi , cen and cenelec should be mandated to suggest effective and efficient eu open security standards , where technological preferences are avoided as much as possible , and which should be made easily manageable by small and medium - size market operators . international standards pertaining to cybersecurity should be carefully vetted in order to ensure that they have not been compromised and that they provide adequate levels of security , thus safeguarding that the mandated compliance with cybersecurity standards enhances the overall level of cybersecurity of the union and not the contrary . __________________ 29 oj l 316 , 14 . 11 . 2012 , p . 12 .


### the commission should periodically review this directive , in particular with a view to determining the need for modification in the light of changing technological or market conditions . ### the commission should periodically review this directive , in consultation with all interested stakeholders , in particular with a view to determining the need for modification in the light of changing societal , political , technological or market conditions


### in order to ensure uniform conditions for the implementation of this directive , implementing powers should be conferred on the commission as regards the cooperation between competent authorities and the commission within the cooperation network , the access to the secure information - sharing infrastructure , the union nis cooperation plan , the formats and procedures applicable to informing the public about incidents , and the standards and / or technical specifications relevant to nis . those powers should be exercised in accordance with regulation no 182 / 2011 of the european parliament and of the council of 16 february 2011 laying down the rules and general principles concerning mechanisms for control by member states of the commission ' s exercise of implementing powers . ### in order to ensure uniform conditions for the implementation of this directive , implementing powers should be conferred on the commission as regards the cooperation between single points of contact and the commission within the cooperation network , without prejudice to existing cooperation mechanisms at national level , the access to the secure information - sharing infrastructure , the union nis cooperation plan , and the formats and procedures applicable to informing the public about incidents . those powers should be exercised in accordance with regulation no 182 / 2011 of the european parliament and of the council of 16 february 2011 laying down the rules and general principles concerning mechanisms for control by member states of the commission ' s exercise of implementing powers .


### in the application of this directive , the commission should liaise as appropriate with relevant sectoral committees and relevant bodies set up at eu level in particular in the field of energy , transport and health . ### in the application of this directive , the commission should liaise as appropriate with relevant sectorial committees and relevant bodies set up at eu level in particular in the field of e - government , energy , transport and health .


### information that is considered confidential by a competent authority , in accordance with union and national rules on business confidentiality , should be exchanged with the commission and other competent authorities only where such exchange is strictly necessary for the application of this directive . the information exchanged should be limited to that which is relevant and proportionate to the purpose of such exchange . ### information that is considered confidential by a competent authority or a single point of contact , in accordance with union and national rules on business confidentiality , should be exchanged with the commission , its relevant agencies , single points of contact and / or other national competent authorities only where such exchange is strictly necessary for the application of this directive . the information exchanged should be limited to that which is relevant , necessary and proportionate to the purpose of such exchange , while respecting pre - defined criteria for confidentiality and security and classification protocols , governing the information sharing procedure .


### creates a cooperation mechanism between member states in order to ensure a uniform application of this directive within the union and , where necessary , a coordinated and efficient handling of and response to risks and incidents affecting network and information systems ; ### creates a cooperation mechanism between member states in order to ensure a uniform application of this directive within the union and , where necessary , a coordinated and efficient handling of and response to risks and incidents affecting network and information systems with the participation of relevant stakeholders ;


### any device or group of inter - connected or related devices , one or more of which , pursuant to a program , perform automatic processing of computer data , as well as ### any device or group of inter - connected or related devices , one or more of which , pursuant to a program , perform automatic processing of digital data , as well as


### computer data stored , processed , retrieved or transmitted by elements covered under point and for the purposes of their operation , use , protection and maintenance . ### digital data stored , processed , retrieved or transmitted by elements covered under point and for the purposes of their operation , use , protection and maintenance .


### ‘ security’ means the ability of a network and information system to resist , at a given level of confidence , accident or malicious action that compromise the availability , authenticity , integrity and confidentiality of stored or transmitted data or the related services offered by or accessible via that network and information system ; ### ‘ security’ means the ability of a network and information system to resist , at a given level of confidence , accident or malicious action that compromise the availability , authenticity , integrity and confidentiality of stored or transmitted data or the related services offered by or accessible via that network and information system ; ' security ' as defined here includes appropriate technical devices , solutions and operating procedures ensuring the security requirements set forth in this directive .


### ‘ risk’ means any circumstance or event having a potential adverse effect on security ; ### ‘ risk’ means any reasonably identifiable circumstance or event having a potential adverse effect on security ;


### ‘ incident handling’ means all procedures supporting the analysis , containment and response to an incident ; ### ‘ incident handling’ means all procedures supporting the detection , prevention , analysis , containment and response to an incident ;


### operator of critical infrastructure that are essential for the maintenance of vital economic and societal activities in the fields of energy , transport , banking , stock exchanges and health , a non exhaustive list of which is set out in annex ii . ### operator of critical infrastructure that are essential for the maintenance of vital economic and societal activities in the fields of energy , transport , banking , stock exchanges and health , a non exhaustive list of which is set out in annex ii , as far as the network and information systems concerned are directly related to it ;


### operator of critical infrastructure that are essential for the maintenance of vital economic and societal activities in the fields of energy , transport , banking , stock exchanges and health , a non exhaustive list of which is set out in annex ii . ### operator of infrastructure that are essential for the maintenance of vital economic and societal activities in the fields of energy , transport , banking , financial market infrastructures and health , and the disruption or destruction of which would have a significant impact in a member state as a result of the failure to maintain those functions , a non exhaustive list of which is set out in annex ii .


### a risk assessment plan to identify risks and assess the impacts of potential incidents ; ### a risk management framework to establish a methodology for the identification , prioritisation , evaluation and treatment of risks , the assessment of the impacts of potential incidents , prevention and control options , and to define criteria for the choice of possible countermeasures ;


### a risk assessment plan to identify risks and assess the impacts of potential incidents ; ### a risk management framework including the identification , prioritisation , evaluation and treatment of risks , the assessment of the impacts of potential incidents , prevention and control options , and criteria for the choice of possible countermeasures ;