### the authority should perform its activities in the areas of cross - border labour mobility and social security coordination , including free movement of workers , posting of workers and highly mobile services . it should also enhance cooperation between member states in tackling undeclared work . in cases where the authority , in the course of the performance of its activities , becomes aware of suspected irregularities , including in areas of union law beyond its scope , such as violations of working conditions , health and safety rules , or the employment of illegally staying third - country nationals , it should be able to report them and cooperate on these matters with the commission , competent union bodies , and national authorities where appropriate . ### the authority should perform its activities in the areas of labour mobility within the internal market and social security coordination , including freedom of movement for workers , as well as freedom of establishment and freedom to provide services . it should also provide operational support to the european platform to enhance cooperation in tackling undeclared work by assuming the functions of its secretariat . in cases where the authority , in the course of the performance of its activities , becomes aware of suspected irregularities , including in areas of union law beyond its scope , such as violations of working conditions , health and safety rules , or the employment of illegally staying third - country nationals , it should be able to report them and cooperate on these matters with the commission , competent union bodies and national authorities where appropriate .


### in certain instances , sector - specific union law has been adopted in order to respond to specific needs in that sector , such as the area of international transport . the authority should also deal with the cross - border aspects of the application of such sector - specific union law , in particular regulation no 561 / 2006 of the european parliament and the council49 , directive 2006 / 22 / ec of the european parliament and the council50 , regulation no 1071 / 2009 of the european parliament and the council51 and directive 278 ) 52 . __________________ 49 regulation no 561 / 2006 of the european parliament and of the council of 15 march 2006 on the harmonisation of certain social legislation relating to road transport and amending council regulations no 3821 / 85 and no 2135 / 98 and repealing council regulation no 3820 / 85 . 50 directive 2006 / 22 / ec of the european parliament and of the council of 15 march 2006 on minimum conditions for the implementation of council regulations no 3820 / 85 and no 3821 / 85 concerning social legislation relating to road transport activities and repealing council directive 88 / 599 / eec . 51 regulation no 1071 / 2009 of the european parliament and of the council of 21 october 2009 establishing common rules concerning the conditions to be complied with to pursue the occupation of road transport operator and repealing council directive 96 / 26 / ec . 52 com278 – proposal for a directive of the european parliament and of the council amending directive 2006 / 22 / ec as regards enforcement requirements and laying down specific rules with respect to directive 96 / 71 / ec and directive 2014 / 67 / eu for posting drivers in the road transport sector . ### in order to respond to specific needs in particular sectors , such as the area of international transport , temporary agencies work , as well as sectors that across many member states are linked to problems with trafficking for labour exploitation such as agriculture , construction , domestic work and hotels and restaurants , the authority should also deal with the labour mobility aspects of the application of the relevant sector - specific union law .


### the member states and the commission should be represented on a management board , in order to ensure the effective functioning of the authority . the composition of the management board , including the selection of its chair and deputy - chair , should respect the principles of gender balance , experience and qualification . in view of the effective and efficient functioning of the authority , the management board , in particular , should adopt an annual work programme , carry out its functions relating to the authority’s budget , adopt the financial rules applicable to the authority , appoint an executive director , and establish procedures for taking decisions relating to the operational tasks of the authority by the executive director . representatives from countries other than union member states , which are applying the union rules within the scope of the authority , may participate in the meetings of the management board as observers . ### the member states , the commission and social partners should be represented on a management board , in order to ensure the effective functioning of the authority . the composition of the management board , including the selection of its chair and deputy - chair , should respect the principles of gender balance , experience and qualification . in view of the effective and efficient functioning of the authority , the management board , in particular , should adopt an annual work programme , carry out its functions relating to the authority’s budget , adopt the financial rules applicable to the authority , appoint an executive director and a deputy executive director , and establish procedures for taking decisions relating to the operational tasks of the authority by the executive director . representatives from countries other than union member states , which are applying the union rules within the scope of the authority , may participate in the meetings of the management board as observers .


### in order to bring an operational dimension to the activities of existing bodies in the areas of cross - border labour mobility , the authority should take over the performance of tasks carried out by the technical committee on the free movement of workers established pursuant to regulation no 492 / 2011 , the committee of experts on posting of workers set up by commission decision 2009 / 17 / ec68 and the european platform to enhance cooperation in tackling undeclared work set up by decision 2016 / 344 of the european parliament and the council69 . with the establishment of the authority , those bodies should cease to exist . __________________ 68 commission decision 2009 / 17 / ec of 19 december 2008 setting up the committee of experts on posting of workers . 69 decision 2016 / 344 of the european parliament and of the council of 9 march 2016 on establishing a european platform to enhance cooperation in tackling undeclared work . ### in order to bring an operational dimension to the activities of existing bodies in the areas of labour mobility within the internal market , the authority should take over the performance of tasks carried out by the technical committee on the free movement of workers established pursuant to regulation no 492 / 2011 and the committee of experts on posting of workers set up by commission decision 2009 / 17 / ec68 . with the establishment of the authority , those bodies should cease to exist . __________________ 68 commission decision 2009 / 17 / ec of 19 december 2008 setting up the committee of experts on posting of workers .


### since the objectives of this regulation to support the free movement of workers and services and to contribute to strengthening fairness in the internal market cannot be sufficiently achieved by the member states acting in an uncoordinated manner , but can rather , by reason of the cross - border nature of those activities and the need for increased cooperation between member states , be better achieved at union level , the union may adopt measures in accordance with the principle of subsidiarity as set out in article 5 of the treaty on european union . in accordance with the principle of proportionality , this regulation does not go beyond what is necessary in order to achieve those objectives . ### since the objectives of this regulation to support the free movement of workers and services and to contribute to strengthening fairness in the internal market cannot be sufficiently achieved by the member states acting in an uncoordinated manner , but can rather , by reason of the cross - border nature of those activities and the need for increased cooperation between member states , as well as for improved compliance , implementation and enforcement of the union law be better achieved at union level , the union may adopt measures in accordance with the principle of subsidiarity as set out in article 5 of the treaty on european union . in accordance with the principle of proportionality , this regulation does not go beyond what is necessary in order to achieve those objectives .


### article 2 objectives the objective of the authority shall be to contribute to ensuring fair labour mobility in the internal market . to this end , the authority shall : facilitate access for individuals and employers to information on their rights and obligations as well as to relevant services ; support cooperation between member states in the cross - border enforcement of relevant union law , including facilitating joint inspections ; mediate and facilitate a solution in cases of cross - border disputes between national authorities or labour market disruptions . ### article 2 objectives the purpose of the authority shall be to contribute to promoting non - precarious and socially just mobility , in particular labour mobility and cross - border provision of services in the internal market . to this end , the authority shall : facilitate access for individuals , employers and social partners to information on their rights and obligations as well as to relevant services ; promote , improve and support cooperation between member states in their endeavours to inspire better cooperation and the consistent , efficient and effective cross - border enforcement of relevant union law , including providing technical , logistical assistance and training aiming to facilitate joint inspections ; oversee the application of union law in the area of labour mobility , as well as examine breaches of this law such as various forms of social fraud , infringements and abuse of labour mobility rights of mobile workers , including seasonal , frontier and posted workers , discrimination , fraudulent work contracts and trafficking for labour exploitation ; at the request of the member states , mediate between national authorities and help to resolve labour market disruptions , or cross - border enforcement problems , without prejudice to the diversity of national relations systems as well as the autonomy of social partners and the right to collective bargaining ; advise the commission and the member states on tackling unemployment ;


### the objective of the authority shall be to contribute to ensuring fair labour mobility in the internal market . to that end , the authority shall : ### the purpose of the authority shall be to promote fair labour mobility in the internal market .


### carry out analyses and risk assessments on issues of cross - border labour mobility , in accordance with article 11 ; ### initiate analyses and carry out risk assessments on issues related to labour mobility within the internal market and issue opinions and recommendations , in accordance with article 11


### in order to achieve its objectives , the authority shall carry out the following tasks : ### in order to achieve its objectives as stipulated in article 2 , the authority shall carry out the following tasks :


### facilitate cooperation and the exchange of information between national authorities with a view to the effective enforcement of relevant union law , in accordance with article 8 ; ### facilitate and encourage cooperation , coordination , as well as the exchange of information between national authorities with a view to consistent , effective and efficient compliance , implementation and enforcement of relevant union law , in accordance with article 8 ;


### to that end , the authority shall , upon request of national authorities , and in order to speed up exchanges between them , in particular : ### to this end , the authority in particular shall :


### to that end , the authority shall , upon request of national authorities , and in order to speed up exchanges between them , in particular : ### to that end , the authority shall , upon request of national authorities or at its own initiative , and in order to speed up exchanges between them , in particular :


### facilitate the follow - up to requests and information exchanges between national authorities by providing logistical and technical support , including translation and interpretation services , and through exchanges on the status of cases ; ### facilitate the follow - up to requests and the exchanges of information including on the status of cases between national authorities by providing logistical and technical support , including translation and interpretation services ;


### promote and share best practices ; ### promote sharing of best practices between member states and provide them with such practices regarding its own knowledge ;


### the authority shall encourage the use of innovative approaches to effective and efficient cross - border cooperation , and explore the potential use of electronic exchange mechanisms between the member states to facilitate the detection of fraud , providing reports to the commission with a view to their further development . ### the agency shall encourage the use of digital tools and innovative approaches to effective and efficient cross - border cooperation , and play a central role in developing electronic exchange mechanisms between the member states to facilitate the detection of fraud , in particular by using electronic application that shall provide direct real - time access to the erru , eessi and imi during roadside checks through which national authorities can access relevant data in real time . it shall provide reports to the commission with a view to their further development .


### the authority shall assess risks and carry out analyses regarding cross - border labour flows , such as labour market imbalances , sector - specific threats and recurring problems encountered by individuals and employers in relation to cross - border mobility . for that purpose , the authority shall ensure complementarity with , and draw on the expertise of , other union agencies or services , including in the areas of skills forecasting and health and safety at work . upon a request by the commission , the authority may carry out focused in - depth analyses and studies to investigate specific labour mobility issues . ### the authority shall assess risks and initiate analyses regarding sector - specific challenges and recurring problems concerning labour mobility within the internal market . such analyses and assessments shall also take into consideration the impacts and the consequences of labour market imbalances . for that purpose , the authority shall ensure complementarity with , and draw on the expertise of other union agencies or services , including in the areas of discrimination of mobile workers , fraudulent work contracts , trafficking for labour exploitation and social fraud , as well as of skills forecasting and health and safety at work . upon a request by the commission or upon its own initiative , the authority may carry out focused in - depth analyses and studies to investigate specific labour mobility issues .


### members of the management board representing their member states and their alternates shall be appointed by their respective member states in light of their knowledge in the fields referred to in article 1 , taking into account relevant managerial , administrative and budgetary skills . ### members of the management board and their alternates shall have appropriate knowledge in the fields referred to in article 1 , as well as relevant managerial , administrative and budgetary skills .


### adopt rules for the prevention and management of conflicts of interest in respect of its members , as well as the members of the stakeholder group and the working groups and panels of the authority set up in accordance with article 17 , and shall publish annually on its website the declaration of interests of the management board members ; ### adopt rules , including measures for detecting potential risks at an early stage , for the prevention and management of conflicts of interest in respect of its members , as well as the members of the stakeholder group and the working groups and panels of the authority set up in accordance with article 17 , as well as for seconded national experts , and shall publish annually on the authority ' s website their declarations of interests and updates ;


### article 23 responsibilities of the executive director the executive director shall manage the authority . the executive director shall be accountable to the management board . 2 . the executive director shall report to the european parliament on the performance of his or her duties when invited to do so . the council may invite the executive director to report on the performance of his or her duties . 3 . the executive director shall be the legal representative of the authority . 4 . the executive director shall be responsible for the implementation of the tasks assigned to the authority by this regulation . in particular , the executive director shall be responsible for : the day - to - day administration of the authority ; implementing decisions adopted by the management board ; preparing the draft single programming document and submitting it to the management board for approval ; implementing the single programming document and reporting to the management board on its implementation ; preparing the consolidated annual report on the authority ' s activities and presenting it to the management board for assessment and adoption ; preparing an action plan following up on the conclusions of internal or external audit reports and evaluations , as well as investigations by olaf and reporting on progress twice a year to the commission and regularly to the management board ; protecting the financial interests of the union by applying preventive measures against fraud , corruption and any other illegal activities , without prejudicing the investigative competence of olaf by effective checks and , if irregularities are detected , by recovering amounts wrongly paid and , where appropriate , by imposing effective , proportionate and dissuasive administrative , including financial penalties ; preparing an anti - fraud strategy for the authority and presenting it to the management board for approval ; preparing the financial rules applicable to the authority and presenting them to the management board ; preparing the authority ' s draft statement of estimates of revenue and expenditure and implementing its budget ; implementing measures established by the management board to comply with obligations on data protection imposed by regulation no 45 / 2001 . 5 . the executive director shall decide whether it is necessary to locate one or more staff in one or more member states . before deciding to establish a local office , the executive director shall obtain the prior consent of the commission , the management board and the member state concerned . the decision shall specify the scope of the activities to be carried out at the local office in a manner that avoids unnecessary costs and the duplication of administrative functions of the authority . a headquarters agreement with the member state concerned may be required . ### article 23 responsibilities of the executive director the executive director shall manage the authority . the executive director shall be accountable to the management board . 2 . the executive director shall report to the european parliament and the commission on the performance of his or her duties when invited to do so . the council may invite the executive director to report on the performance of his or her duties . 3 . the executive director shall be the legal representative of the authority . 4 . the executive director shall be responsible for the implementation of the tasks assigned to the authority by this regulation . in particular , the executive director shall be responsible for : the day - to - day administration of the authority ; implementing decisions adopted by the management board ; preparing the draft single programming document and submitting it to the management board for approval ; implementing the single programming document and reporting to the management board on its implementation ; preparing the consolidated annual report on the authority ' s activities and presenting it to the management board for assessment and adoption ; preparing an action plan following up on the conclusions of internal or external audit reports and evaluations , as well as investigations by olaf and reporting on progress twice a year to the commission , the european parliament and regularly to the management board ; protecting the financial interests of the union by applying preventive measures against fraud , corruption and any other illegal activities , without prejudicing the investigative competence of olaf by effective checks and , if irregularities are detected , by recovering amounts wrongly paid and , where appropriate , by imposing effective , proportionate and dissuasive administrative , including financial penalties ; preparing an anti - fraud strategy for the authority and presenting it to the management board for approval ; preparing the financial rules applicable to the authority and presenting them to the management board ; preparing the authority ' s draft statement of estimates of revenue and expenditure and implementing its budget ; implementing measures established by the management board to comply with obligations on data protection imposed by regulation no 45 / 2001 ; preside over dispute settlement proceedings . 5 . the executive director shall decide whether it is necessary to locate one or more staff in one or more member states , either on a temporary or permanent basis . before deciding to establish a local office , the executive director shall obtain the prior consent of the commission , the management board and the member state concerned . the decision shall specify the primary scope of the activities to be carried out at the local office in a manner that avoids unnecessary costs and the duplication of administrative functions of the authority . a headquarters agreement with the member state concerned shall be required . 5 athe staff located in one or more member states , either on a temporary or permanent basis , shall cooperate with the local authorities of the member states accordingly , however the staff shall always be under the direction of the authority .


### preparing an action plan following up on the conclusions of internal or external audit reports and evaluations , as well as investigations by olaf and reporting on progress twice a year to the commission and regularly to the management board ; ### preparing an action plan following up on the conclusions of internal or external audit reports and evaluations , as well as investigations by olaf and reporting on progress twice a year to the commission and regularly to the management board and the executive board ;


### preparing the financial rules applicable to the authority and presenting them to the management board ; ### preparing the draft financial rules applicable to the authority and presenting them to the management board for approval ;


### implementing measures established by the management board to comply with obligations on data protection imposed by regulation no 45 / 2001 . ### internal rules established by the management board in accordance with regulation no 45 / 2001 .


### article 32 executive director the executive director shall be engaged as a temporary agent of the authority in accordance with article 2 of the conditions of employment of other servants . 2 . the management board shall appoint the executive director from a list of candidates proposed by the commission , following an open and transparent selection procedure . 3 . for the purpose of concluding the contract with the executive director , the authority shall be represented by the chairperson of the management board . 4 . the term of office of the executive director shall be five years . by the end of that period , the commission shall undertake an assessment that takes into account an evaluation of the executive director ' s performance and the authority ' s future tasks and challenges . 5 . the management board , acting on a proposal from the commission that takes into account the assessment referred to in paragraph 4 , may extend the term of office of the executive director once , for no more than five years . 6 . an executive director whose term of office has been extended may not participate in another selection procedure for the same post at the end of the cumulative period . 7 . the executive director may be removed from office only upon a decision of the management board acting on a proposal from the commission . 8 . the management board shall reach decisions on the appointment , extension of the term of office or removal from office of the executive director on the basis of a two - thirds majority of its members entitled to vote . ### article 32 executive director the executive director shall be engaged as a temporary agent of the authority in accordance with article 2 of the conditions of employment of other servants . 2 . the management board shall appoint the executive director from a list of candidates proposed by the commission and member states , following an open and transparent selection procedure . when there are two candidates of equal merit , the management board shall give preference to the under represented gender . 3 . for the purpose of concluding the contract with the executive director , the authority shall be represented by the chairperson of the management board . 4 . the term of office of the executive director shall be four years . by the end of that period , the commission shall undertake an assessment that takes into account an evaluation of the executive director ' s performance and the authority ' s future tasks and challenges . 5 . the management board , acting on a proposal from the commission that takes into account the assessment referred to in paragraph 4 , may extend the term of office of the executive director once , for no more than four years . 6 . an executive director whose term of office has been extended may not participate in another selection procedure for the same post at the end of the cumulative period . 7 . the executive director may be removed from office only upon a decision of the management board . 8 . the management board shall reach decisions on the appointment , extension of the term of office or removal from office of the executive director on the basis of a two - thirds majority of its members entitled to vote .


### the executive director shall be engaged as a temporary agent of the authority in accordance with article 2 of the conditions of employment of other servants . ### the executive director shall be a member of staff and shall be engaged as a temporary agent of the authority in accordance with article 2 of the conditions of employment of other servants .


### the term of office of the executive director shall be five years . by the end of that period , the commission shall undertake an assessment that takes into account an evaluation of the executive director ' s performance and the authority ' s future tasks and challenges . ### the term of office of the executive director shall be five years . by six months before the end of that period , the commission shall undertake an assessment that takes into account an evaluation of the executive director ' s performance and the authority ' s future tasks and challenges .


### an executive director whose term of office has been extended may not participate in another selection procedure for the same post at the end of the cumulative period . ### an executive director whose term of office has been extended may not participate in another selection procedure for the same post at the end of the overall period .


### no later than five years after the date referred to in article 51 , and every five years thereafter , the commission shall assess the authority ' s performance in relation to its objectives , mandate and tasks . the evaluation shall , in particular , address the possible need to modify the mandate of the authority , and the financial implications of any such modification , including by further synergies and streamlining with agencies active in the area of employment and social policy . ### no later than five years after the date referred to in article 51 , and every five years thereafter , the commission shall assess the authority ' s performance in relation to its objectives , mandate and tasks . the evaluation shall , in particular , address the possible need to modify the mandate of the authority , and the financial implications of any such modification , including by further synergies and streamlining with agencies active in the area of employment and social policy . the evaluation shall be gender mainstreamed and include a chapter on gender equality .


### the necessary arrangements concerning the accommodation to be provided for the authority in the host member state , together with the specific rules applicable in the host member state to the executive director , members of the management board , authority staff and members of their families , shall be laid down in a headquarters agreement between the authority and the member state where the seat is located , concluded after obtaining the approval of the management board and no later than two years after the entry into force of this regulation . ### the necessary arrangements concerning the accommodation to be provided for the authority in the host member state , together with the specific rules applicable in the host member state to the executive director , members of the management board , authority staff and members of their families , shall be laid down in a headquarters agreement between the authority and the member state where the seat is located , concluded after obtaining the approval of the management board and no later than two years after the entry into force of this regulation . the accommodation shall be ready for use and fully functional by the time the agreement is concluded .


### decision 2009 / 17 / ec and decision 2016 / 344 are repealed . ### decision 2009 / 17 / ec is repealed .


### references to decision 2009 / 17 / ec and decision 2016 / 344 shall be construed as references to this regulation . ### references to decision 2009 / 17 / ec shall be construed as references to this regulation .


### to promote the implementation of the european integrated border management defined by its components in accordance with article 4 of regulation 2016 / 1624 : border control , search and rescue during border surveillance , risk analysis , cooperation between member states , inter - agency cooperation , cooperation with third countries , technical and operational measures within the schengen area related to border control and designed to address illegal immigration and to counter cross - border crime better , use of state - of - the - art technology , quality control and solidarity mechanisms , and to ensure that it becomes an operational reality , member states should be provided with adequate union financial support . ### to promote the implementation of the european integrated border management defined by its components in accordance with article 4 of regulation 2016 / 1624 : border control , search and rescue during border surveillance , risk analysis , cooperation between member states , inter - agency cooperation , cooperation with third countries , technical and operational measures within the schengen area related to border control and designed to address irregular immigration and to counter cross - border crime better , use of state - of - the - art technology , quality control and solidarity mechanisms , and to ensure that it becomes an operational reality , member states should be provided with adequate union financial support .


### reflecting the importance of tackling climate change in line with the union ' s commitments to implement the paris agreement and the united nations sustainable development goals , this instrument will contribute to mainstream climate actions and to the achievement of an overall target of 25 % of the eu budget expenditures supporting climate objectives . relevant actions will be identified during the preparation and implementation of the instrument , and reassessed in the context of the relevant evaluations and review processes . ### reflecting the urgency of tackling climate change in line with the union ' s commitments to implement the paris agreement and to be a frontrunner in implementing the united nations sustainable development goals including gender equality , this instrument will contribute to mainstream climate actions and to the achievement of an overall target of 30 % as soon as possible and at the latest by 2027 of the eu budget expenditures supporting climate objectives . relevant actions will be identified during the preparation and implementation of the instrument , and reassessed in the context of the relevant evaluations and review processes .


### supporting effective european integrated border management at the external borders implemented by the european border and coast guard as a shared responsibility of the european border and coast guard agency and of the national authorities responsible for border management , to facilitate legitimate border crossings , to prevent and detect illegal immigration and cross - border crime and to effectively manage migratory flows ; ### supporting effective european integrated border management at the external borders implemented by the european border and coast guard as a shared responsibility of the european border and coast guard agency and of the national authorities responsible for border management , to facilitate legitimate border crossings , to prevent and detect&#160 ; irregular immigration and cross - border crime and to effectively manage migratory flows ;


### whenever a member state decides to implement actions with or in a third country with the support of the instrument relating to monitoring , detection , identification , tracking , prevention and interception of unauthorised border crossings for the purpose of detecting , preventing and combating illegal immigration and cross - border crime or contributing to the protection and saving the lives of migrants , it shall ensure that it has notified the commission of any bilateral or multilateral cooperation agreement with that third country in accordance with article 20 of regulation no 1052 / 2013 . ### whenever a member state decides to implement actions with or in a third country with the support of the instrument relating to monitoring , detection , identification , tracking , prevention and interception of unauthorised border crossings for the purpose of detecting , preventing and combating irregular immigration and cross - border crime or contributing to the protection and saving the lives of migrants , it shall ensure that it has notified the commission of any bilateral or multilateral cooperation agreement with that third country in accordance with article 20 of regulation no 1052 / 2013 .


### our daily lives and economies become increasingly dependent on digital technologies , citizens become more and more exposed to serious cyber incidents . future security depends , among others , on enhancing technological and industrial ability to protect the union against cyber threats , as both civilian infrastructure and military capacities rely on secure digital systems . ### more than 80% of the population of the european union is connected to the internet and our daily lives and economies are becoming increasingly dependent on digital technologies , with citizens becoming more and more exposed to serious cyber incidents . future security depends , among others , on enhancing technological and industrial ability to protect the union against cyber threats , as both civilian infrastructure and military capacities rely on secure digital systems .


### substantial disruption of network and information systems can affect individual member states and the union as a whole . the security of network and information systems is therefore essential for the smooth functioning of the internal market . at the moment , the union depends on non - european cybersecurity providers . however , it is in the union’s strategic interest to ensure that it retains and develops essential cybersecurity technological capacities to secure its digital single market , and in particular to protect critical networks and information systems and to provide key cybersecurity services . ### substantial disruption of network and information systems can affect individual member states and the union as a whole . the highest level of security of network and information systems throughout the union is therefore essential for the smooth functioning of the society and economy , i . e . the internal market . at the moment , the union depends on non - european cybersecurity providers . however , it is in the union’s strategic interest to ensure that it retains and develops essential cybersecurity technological capacities to secure the protection of data and critical networks and information systems of european citizens and companies , including critical infrastructures for the functioning of society such as transport systems , health systems and banking , and the digital single market and to provide key cybersecurity services .


### a wealth of expertise and experience in cybersecurity research , technology and industrial development exists in the union but the efforts of industrial and research communities are fragmented , lacking alignment and a common mission , which hinders competitiveness in this domain . these efforts and expertise need to be pooled , networked and used in an efficient manner to reinforce and complement existing research , technology and industrial capacities at union and national levels . ### a wealth of expertise and experience in cybersecurity research , technology and industrial development exists in the union but the efforts of industrial and research communities are fragmented , lacking alignment and a common mission , which hinders competitiveness and effective protection of critical data , networks and systems in this domain . these efforts and expertise need to be pooled , networked and used in an efficient manner to reinforce and complement existing research , technology , skills and industrial capacities at union and national levels .


### the competence centre should be the union’s main instrument to pool investment in cybersecurity research , technology and industrial development and to implement relevant projects and initiatives together with the cybersecurity competence network . it should deliver cybersecurity - related financial support from the horizon europe and digital europe programmes , and should be open to the european regional development fund and other programmes where appropriate . this approach should contribute to creating synergies and coordinating financial support related to cybersecurity research , innovation , technology and industrial development and avoiding duplication . ### the competence centre should be the union’s main instrument to develop european leadership in cybersecurity , to pool investment in cybersecurity research , technology and industrial development , to support smes in gathering expertise in cybersecurity and to implement relevant projects and initiatives together with the cybersecurity competence network . it should deliver cybersecurity - related financial support from the horizon europe , digital europe programmes and the european defence fund for actions related to defence , and should be open to the european regional development fund and other programmes where appropriate . this approach should contribute to creating synergies and coordinating financial support related to cybersecurity research , innovation , technology and industrial development and avoiding duplication .


### the competence centre should be the union’s main instrument to pool investment in cybersecurity research , technology and industrial development and to implement relevant projects and initiatives together with the cybersecurity competence network . it should deliver cybersecurity - related financial support from the horizon europe and digital europe programmes , and should be open to the european regional development fund and other programmes where appropriate . this approach should contribute to creating synergies and coordinating financial support related to cybersecurity research , innovation , technology and industrial development and avoiding duplication . ### the competence centre should be the union’s main instrument to pool investment in cybersecurity research , technology and industrial development and to implement relevant projects and initiatives together with the cybersecurity competence network . it should deliver cybersecurity - related financial support from the horizon europe and digital europe programmes , and should be open to the european regional development fund , european defence fund and other programmes where appropriate . this approach should contribute to creating synergies and coordinating financial support related to cybersecurity research , innovation , technology and industrial development and avoiding duplication .


### the competence centre should be the union ' s main instrument to pool investment in cybersecurity research , technology and industrial development and to implement relevant projects and initiatives together with the cybersecurity competence network . it should deliver cybersecurity - related financial support from the horizon europe and digital europe programmes , and should be open to the european regional development fund and other programmes where appropriate . this approach should contribute to creating synergies and coordinating financial support related to cybersecurity research , innovation , technology and industrial development and avoiding duplication . ### the competence centre should be the union ' s main instrument to pool investment in cybersecurity research , technology and industrial development and to implement relevant projects and initiatives together with the cybersecurity competence network . it should deliver cybersecurity - related financial support from the horizon europe and digital europe programmes , as well as from the european defence fund for actions and administrative costs related to defence , and should be open to the european regional development fund and other programmes where appropriate . this approach should contribute to creating synergies and coordinating financial support related to union initiatives in the field of cybersecurity research and development , innovation , technology and industrial development and avoiding duplication .


### national coordination centres should be selected by member states . in addition to the necessary administrative capacity , centres should either possess or have direct access to cybersecurity technological expertise in cybersecurity , notably in domains such as cryptography , ict security services , intrusion detection , system security , network security , software and application security , or human and societal aspects of security and privacy . they should also have the capacity to effectively engage and coordinate with the industry , the public sector , including authorities designated pursuant to the directive 2016 / 1148 of the european parliament and of the council23 , and the research community . _________________ 23 directive 2016 / 1148 of the european parliament and of the council of 6 july 2016 concerning measures for a high common level of security of network and information systems across the union . ### national coordination centres should be selected by member states and approved by the competence centre . in addition to the necessary administrative capacity , centres should either possess or have direct access to cybersecurity technological expertise in cybersecurity , notably in domains such as cryptography , ict security services , intrusion detection , system security , network security , software and application security , or human , societal and environmental aspects of security and privacy . they should also have the capacity to effectively engage and coordinate with the industry , the public sector , including authorities designated pursuant to the directive 2016 / 1148 of the european parliament and of the council23 , and the research community in order to establish a continuous public - private dialogue on cybersecurity . _________________ 23 directive 2016 / 1148 of the european parliament and of the council of 6 july 2016 concerning measures for a high common level of security of network and information systems across the union .


### national coordination centres should be selected by member states . in addition to the necessary administrative capacity , centres should either possess or have direct access to cybersecurity technological expertise in cybersecurity , notably in domains such as cryptography , ict security services , intrusion detection , system security , network security , software and application security , or human and societal aspects of security and privacy . they should also have the capacity to effectively engage and coordinate with the industry , the public sector , including authorities designated pursuant to the directive 2016 / 1148 of the european parliament and of the council23 , and the research community . _________________ 23 directive 2016 / 1148 of the european parliament and of the council of 6 july 2016 concerning measures for a high common level of security of network and information systems across the union . ### national coordination centres should be selected by member states . in addition to the necessary administrative capacity , centres should either possess or have direct access to cybersecurity technological expertise in cybersecurity , notably in domains such as cryptography , ict security services , intrusion detection , system security , network security , software and application security , or human , ethical and societal aspects of security and privacy . they should also have the capacity to effectively engage and coordinate with the industry , the public sector , including authorities designated pursuant to the directive 2016 / 1148 of the european parliament and of the council23 , and the research community . in addition , awareness should be raised amongst the general public about cybersecurity through appropriate communicative means . _________________ 23 directive 2016 / 1148 of the european parliament and of the council of 6 july 2016 concerning measures for a high common level of security of network and information systems across the union .


### emerging technologies such as artificial intelligence , internet of things , high - performance computing and quantum computing , blockchain and concepts such as secure digital identities create at the same time new challenges for cybersecurity as well as offer solutions . assessing and validating the robustness of existing or future ict systems will require testing security solutions against attacks run on hpc and quantum machines . the competence centre , the network and the cybersecurity competence community should help advance and disseminate the latest cybersecurity solutions . at the same time the competence centre and the network should be at the service of developers and operators in critical sectors such as transport , energy , health , financial , government , telecom , manufacturing , defence , and space to help them solve their cybersecurity challenges . ### emerging technologies such as artificial intelligence , internet of things , high - performance computing and quantum computing , blockchain and concepts such as secure digital identities create at the same time new challenges for cybersecurity as well as offer solutions . assessing and validating the robustness of existing or future ict systems will require testing security solutions against attacks run on hpc and quantum machines . the competence centre , the network and the cybersecurity competence community should help advance and disseminate the latest cybersecurity solutions and research to bridge the valley of death of innovation of cybersecurity technologies and services . at the same time the competence centre , the network and the cybersecurity competence community should be at the service of developers and operators in critical sectors such as transport , energy , health , financial , government , telecom , manufacturing , defence , and space to help them solve their cybersecurity challenges .


### emerging technologies such as artificial intelligence , internet of things , high - performance computing and quantum computing , blockchain and concepts such as secure digital identities create at the same time new challenges for cybersecurity as well as offer solutions . assessing and validating the robustness of existing or future ict systems will require testing security solutions against attacks run on hpc and quantum machines . the competence centre , the network and the cybersecurity competence community should help advance and disseminate the latest cybersecurity solutions . at the same time the competence centre and the network should be at the service of developers and operators in critical sectors such as transport , energy , health , financial , government , telecom , manufacturing , defence , and space to help them solve their cybersecurity challenges . ### emerging technologies such as artificial intelligence , internet of things , high - performance computing and quantum computing , blockchain and concepts such as secure digital identities create at the same time new challenges for cybersecurity as well as offer solutions . assessing and validating the robustness of existing or future ict systems will require testing security solutions against attacks run on hpc and quantum machines . the competence centre , the network and the cybersecurity competence community should help advance and disseminate the latest cybersecurity solutions . at the same time the competence centre and the network should be at the service of developers and operators in the critical sectors of transport , energy , health , financial , government , telecom , manufacturing , defence , and space to help them solve their cybersecurity challenges , including the theft of intellectual property and industrial espionage undertaken with it tools .


### the competence centre should have several key functions . first , the competence centre should facilitate and help coordinate the work of the european cybersecurity competence network and nurture the cybersecurity competence community . the centre should drive the cybersecurity technological agenda and facilitate access to the expertise gathered in the network and the cybersecurity competence community . secondly , it should implement relevant parts of digital europe and horizon europe programmes by allocating grants , typically following a competitive call for proposals . thirdly , the competence centre should facilitate joint investment by the union , member states and / or industry . ### the competence centre should have several key functions . first , the competence centre should facilitate and help coordinate the work of the european cybersecurity competence network and nurture the cybersecurity competence community . the centre should drive the cybersecurity technological agenda and pool , share and facilitate access to the expertise gathered in the network and the cybersecurity competence community , and to cybersecurity infrastructure . secondly , it should implement relevant parts of digital europe and horizon europe programmes by allocating grants , typically following a competitive call for proposals . thirdly , the competence centre should facilitate joint investment , training opportunities and awareness raising programmes in line with the digital europe programme for citizens and businesses to overcome the skill gap by the union , member states and / or industry . it should pay special attention to the enabling of smes in the area of cybersecurity .


### the competence centre should have several key functions . first , the competence centre should facilitate and help coordinate the work of the european cybersecurity competence network and nurture the cybersecurity competence community . the centre should drive the cybersecurity technological agenda and facilitate access to the expertise gathered in the network and the cybersecurity competence community . secondly , it should implement relevant parts of digital europe and horizon europe programmes by allocating grants , typically following a competitive call for proposals . thirdly , the competence centre should facilitate joint investment by the union , member states and / or industry . ### the competence centre should have several key functions . first , the competence centre should facilitate and help coordinate the work of the european cybersecurity competence network and nurture the cybersecurity competence community . the centre should drive the cybersecurity technological agenda and facilitate access to the expertise gathered in the network and the cybersecurity competence community . secondly , it should implement relevant parts of digital europe , horizon europe and european defence fund programmes by allocating grants , typically following a competitive call for proposals . thirdly , the competence centre should facilitate joint investment by the union , member states and / or industry .


### the competence centre should have several key functions . first , the competence centre should facilitate and help coordinate the work of the european cybersecurity competence network and nurture the cybersecurity competence community . the centre should drive the cybersecurity technological agenda and facilitate access to the expertise gathered in the network and the cybersecurity competence community . secondly , it should implement relevant parts of digital europe and horizon europe programmes by allocating grants , typically following a competitive call for proposals . thirdly , the competence centre should facilitate joint investment by the union , member states and / or industry . ### the competence centre should have several key functions . first , the competence centre should facilitate and help coordinate the work of the european cybersecurity competence network and nurture the cybersecurity competence community . the centre should drive the cybersecurity technological agenda and facilitate access to the expertise gathered in the network and the cybersecurity competence community . secondly , it should implement relevant parts of digital europe and horizon europe programmes as well as of the european defence fund , by allocating grants , typically following a competitive call for proposals . thirdly , the competence centre should facilitate joint investment by the union , member states and / or industry .


### the competence centre should stimulate and support the cooperation and coordination of the activities of the cybersecurity competence community , which would involve a large , open , and diverse group of actors involved in cybersecurity technology . that community should include in particular research entities , supply - side industries , demand side industries , and the public sector . the cybersecurity competence community should provide input to the activities and work plan of the competence centre and it should also benefit from the community - building activities of the competence centre and the network , but otherwise should not be privileged with regard to calls for proposals or calls for tender . ### the competence centre should stimulate and support the long - term strategic cooperation and coordination of the activities of the cybersecurity competence community , which would involve a large , open , interdisciplinary and diverse group of european actors involved in cybersecurity technology . that community should include in particular research entities , supply - side industries and demand - side industries including smes , and the public sector . the cybersecurity competence community should provide input to the activities and work plan of the competence centre and it should also benefit from the community - building activities of the competence centre and the network , but otherwise should not be privileged with regard to calls for proposals or calls for tender .


### the competence centre should stimulate and support the cooperation and coordination of the activities of the cybersecurity competence community , which would involve a large , open , and diverse group of actors involved in cybersecurity technology . that community should include in particular research entities , supply - side industries , demand side industries , and the public sector . the cybersecurity competence community should provide input to the activities and work plan of the competence centre and it should also benefit from the community - building activities of the competence centre and the network , but otherwise should not be privileged with regard to calls for proposals or calls for tender . ### the competence centre should stimulate and support the cooperation and coordination of the activities of the cybersecurity competence community , which would involve a large , open , and diverse group of actors involved in cybersecurity technology . that community should include in particular research entities , including those working on cybersecurity ethics , supply - side industries , demand side industries , and the public sector . the cybersecurity competence community should provide input to the activities and work plan of the competence centre and it should also benefit from the community - building activities of the competence centre and the network , but otherwise should not be privileged with regard to calls for proposals or calls for tender .


### in order to respond to the needs of both demand and supply side industries , the competence centre’s task to provide cybersecurity knowledge and technical assistance to industries should refer to both ict products and services and all other industrial and technological products and solutions in which cybersecurity is to be embedded . ### in order to respond to the needs of the public sector and both demand and supply side industries , the competence centre’s task to provide cybersecurity knowledge and technical assistance to the public sector and industries should refer to both ict products and services and all other industrial and technological products and solutions in which cybersecurity is to be embedded .


### in order to respond to the needs of both demand and supply side industries , the competence centre’s task to provide cybersecurity knowledge and technical assistance to industries should refer to both ict products and services and all other industrial and technological products and solutions in which cybersecurity is to be embedded . ### in order to respond to the needs of both demand and supply side industries , the competence centre’s task to provide cybersecurity knowledge and technical assistance to industries should refer to both ict products , processes and services and all other industrial and technological products and solutions in which cybersecurity is to be embedded .


### whereas the competence centre and the network should strive to achieve synergies between the cybersecurity civilian and defence spheres , projects financed by the horizon europe programme will be implemented in line with regulation xxx [ horizon europe regulation ] , which provides that research and innovation activities carried out under horizon europe shall have a focus on civil applications . ### whereas the competence centre and the network should strive to achieve synergies between the cybersecurity civilian and defence spheres in line with the union goals as laid out by common foreign and security policy and the permanent structured cooperation , projects financed by the horizon europe programme will be implemented in line with regulation xxx [ horizon europe regulation ] , which provides that research and innovation activities carried out under horizon europe shall have an exclusive focus on civil applications . actions enhancing such synergies shall therefore be co - funded through the european defence fund .


### in order to ensure structured and sustainable collaboration , the relation between the competence centre and the national coordination centres should be based on a contractual agreement . ### in order to ensure structured and sustainable collaboration , the relation between the competence centre and the national coordination centres should be based on a contractual agreement that should be harmonised on european level .


### appropriate provisions should be made to guarantee the liability and transparency of the competence centre . ### appropriate provisions should be made to guarantee the liability and transparency of the competence centre and those undertakings receiving funding .


### in order for the competence centre to function properly and effectively , the commission and the member states should ensure that persons to be appointed to the governing board have appropriate professional expertise and experience in functional areas . the commission and the member states should also make efforts to limit the turnover of their respective representatives on the governing board in order to ensure continuity in its work . ### in order for the competence centre to function properly and effectively , the commission and the member states should ensure that persons to be appointed to the governing board have appropriate professional expertise and experience in functional areas . the commission and the member states should also make efforts to limit the turnover of their respective representatives on the governing board in order to ensure continuity in its work . enisa should also have a permanent advisory role , without voting rights , in the governing board , and should be consulted on all the centre ' s relevant activities .


### the smooth functioning of the competence centre requires that its executive director be appointed on grounds of merit and documented administrative and managerial skills , as well as competence and experience relevant for cybersecurity , and that the duties of the executive director be carried out with complete independence . ### the smooth functioning of the competence centre requires that its executive director be appointed in a transparent manner on the grounds of merit and documented administrative and managerial skills , as well as competence and experience relevant for cybersecurity , and that the duties of the executive director be carried out with complete independence .


### the competence centre should have an industrial and scientific advisory board as an advisory body to ensure regular dialogue with the private sector , consumers’ organisations and other relevant stakeholders . the industrial and scientific advisory board should focus on issues relevant to stakeholders and bring them to the attention of the competence centre’s governing board . the composition of the industrial and scientific advisory board and the tasks assigned to it , such as being consulted regarding the work plan , should ensure sufficient representation of stakeholders in the work of the competence centre . ### the competence centre should have an industrial and scientific advisory board as an advisory body to ensure regular dialogue with the private and public sector , including smes , consumers’ organisations and other relevant stakeholders from all parts of the union . the industrial and scientific advisory board should focus on issues relevant to stakeholders and bring them to the attention of the competence centre’s governing board . the composition of the industrial and scientific advisory board and the tasks assigned to it , such as being consulted regarding the work plan , should ensure sufficient representation of the above - mentioned stakeholder groups in the work of the competence centre .


### the competence centre should have an industrial and scientific advisory board as an advisory body to ensure regular dialogue with the private sector , consumers’ organisations and other relevant stakeholders . the industrial and scientific advisory board should focus on issues relevant to stakeholders and bring them to the attention of the competence centre’s governing board . the composition of the industrial and scientific advisory board and the tasks assigned to it , such as being consulted regarding the work plan , should ensure sufficient representation of stakeholders in the work of the competence centre . ### the competence centre should have an industrial and scientific advisory board as an advisory body to ensure regular and appropriately transparent dialogue with the private sector , consumers’ organisations and other relevant stakeholders . the industrial and scientific advisory board should focus on issues relevant to stakeholders and bring them to the attention of the competence centre’s governing board . the composition of the industrial and scientific advisory board and the tasks assigned to it , such as being consulted regarding the work plan , should ensure sufficient representation of stakeholders in the work of the competence centre .


### the competence centre should have an industrial and scientific advisory board as an advisory body to ensure regular dialogue with the private sector , consumers’ organisations and other relevant stakeholders . the industrial and scientific advisory board should focus on issues relevant to stakeholders and bring them to the attention of the competence centre ' s governing board . the composition of the industrial and scientific advisory board and the tasks assigned to it , such as being consulted regarding the work plan , should ensure sufficient representation of stakeholders in the work of the competence centre . ### the competence centre should have an industrial and scientific advisory board as an advisory body to ensure regular dialogue with the private sector , consumers’ organisations and other relevant stakeholders . it should also provide the executive director and the governing board with independent advice on deployment and procurement . the industrial and scientific advisory board should focus on issues relevant to stakeholders and bring them to the attention of the competence centre ' s governing board . the composition of the industrial and scientific advisory board and the tasks assigned to it , such as being consulted regarding the work plan , should ensure sufficient representation of stakeholders in the work of the competence centre . a minimum number of seats should be allocated to each category of industry stakeholders , with particular attention paid to the representation of smes .


### the competence centre should benefit from the particular expertise and the broad and relevant stakeholders’ representation built through the contractual public - private partnership on cybersecurity during the duration of horizon2020 , through its industrial and scientific advisory board . ### the competence centre and its activities should benefit from the particular expertise and the broad and relevant stakeholders’ representation built through the contractual public - private partnership on cybersecurity during the duration of horizon2020 , and the pilot projects under horizon2020 on the cybersecurity competence network , through its industrial and scientific advisory board . the competence centre and industrial and scientific advisory board should , if appropriate , consider replications of existing structures , for example as working groups .


### since the objectives of this regulation , namely retaining and developing union’s cybersecurity technological and industrial capacities , increasing the competitiveness of the union’s cybersecurity industry and turning cybersecurity into a competitive advantage of other union industries , cannot be sufficiently achieved by the member states due the fact that existing , limited resources are dispersed as well as due to the scale of the investment necessary , but can rather by reason of avoiding unnecessary duplication of these efforts , helping to achieve critical mass of investment and ensuring that public financing is used in an optimal way be better achieved at union level , the union may adopt measures , in accordance with the principle of subsidiarity as set out in article 5 of the treaty on european union . in accordance with the principle of proportionality as set out in that article , this regulation does not go beyond what is necessary in order to achieve that objective . ### the objectives of this regulation , namely the development of european leadership in cybersecurity through retaining and developing union’s cybersecurity technological and industrial capacities , increasing the competitiveness of the union’s cybersecurity industry and turning cybersecurity into a competitive advantage of other union industries , cannot be sufficiently achieved by the member states due the fact that existing , limited resources are dispersed as well as due to the scale of the investment necessary , but can rather by reason of avoiding unnecessary duplication of these efforts , helping to achieve critical mass of investment and ensuring that public financing is used in an optimal way be better achieved at union level . in addition , only actions on the european level can ensure the highest level of cybersecurity in all member states and thus close security gaps existing in some member states that create security gaps for the whole union . hence , the union may adopt measures , in accordance with the principle of subsidiarity as set out in article 5 of the treaty on european union . in accordance with the principle of proportionality as set out in that article , this regulation does not go beyond what is necessary in order to achieve that objective .


### ‘ cybersecurity products and solutions’ means ict products , services or process with the specific purpose of protecting network and information systems , their users and affected persons from cyber threats ; ### ‘ cybersecurity products and solutions’ means ict products , services or processes with the specific purpose of protecting data , network and information systems , their users and affected persons from cyber threats ;


### increase the competitiveness of the union ' s cybersecurity industry and turn cybersecurity into competitive advantage of other union industries . ### increase the competitiveness of the union ' s cybersecurity industry by promoting the uptake of cybersecurity products and solutions developed within the union and thereby turning cybersecurity into a competitive advantage of other union industries , giving it a firm foundation and making it a key player in the fight against cyber - attacks ;


### contribute to the implementation of the cybersecurity part of the digital europe programme established by regulation no xxx26 and in particular actions related to article 6 of regulation no xxx [ digital europe programme ] and of the horizon europe programme established by regulation no xxx27 and in particular section 2 . 2 . 6 of pillar ii of annex i . of decision no xxx on establishing the specific programme implementing horizon europe – the framework programme for research and innovation [ ref . number of the specific programme ] . and of other union programmes when provided for in legal acts of the union ] ; _________________ 26 [ add full title and oj reference ] 27 [ add full title and oj reference ] ### contribute to the implementation of the cybersecurity part of the digital europe programme established by regulation no xxx26 and in particular actions related to article 6 of regulation no xxx [ digital europe programme ] , of the horizon europe programme established by regulation no xxx27 and in particular section 2 . 2 . 6 of pillar ii of annex i . of decision no xxx on establishing the specific programme implementing horizon europe – the framework programme for research and innovation [ ref . number of the specific programme ] and of the european defence fund established by regulation no xxx . and of other union programmes when provided for in legal acts of the union ; _________________ 26 [ add full title and oj reference ] 27 [ add full title and oj reference ]


### enhance cybersecurity capabilities , knowledge and infrastructures at the service of industries , the public sector and research communities , by carrying out the following tasks : ### enhance cybersecurity resilience , capacities , capabilities , knowledge and infrastructures at the service of society , industries , the public sector and research communities , by carrying out the following tasks having regard to the state - of - the - art cybersecurity industrial and research infrastructures and related services :


### having regard to the state - of - the - art cybersecurity industrial and research infrastructures and related services , providing support to other entities , including financially , to acquiring , upgrading , operating and making available such infrastructures and related services to a wide range of users across the union from industry including smes , the public sector and the research and scientific community ; ### having regard to the state - of - the - art cybersecurity industrial and research infrastructures and related services , providing support to other entities , including financially , to acquiring , sharing , upgrading , operating and making available such infrastructures and related services to a wide range of users across the union from industry , in particular smes , the public sector and the research and scientific community ;


### contribute to the wide deployment of state - of - the - art cyber security products and solutions across the economy , by carrying out the following tasks : ### contribute to the wide deployment of state - of - the - art cyber security products and solutions across the economy , by carrying out the following tasks in accordance with the principles of equal treatment and no discrimination and the requirements of directive 2014 / 24 / eu :


### contribute to the wide deployment of state - of - the - art cyber security products and solutions across the economy , by carrying out the following tasks : ### contribute to the wide deployment of state - of - the - art and sustainable cybersecurity products and solutions across the union and across different sectors of the economy , by carrying out the following tasks :


### stimulating cybersecurity research , development and the uptake of union cybersecurity products and solutions by public authorities and user industries ; ### stimulating the whole innovation cycle of cybersecurity and bridging the valley of death of innovation by enhancing cybersecurity research , development and the market uptake cybersecurity products and holistic solutions by public authorities and user industries in the union ;


### stimulating cybersecurity research , development and the uptake of union cybersecurity products and solutions by public authorities and user industries ; ### stimulating cybersecurity research , development and the uptake of union cybersecurity products , processes and solutions by public authorities and user industries ;


### supporting in particular public authorities in organising their public procurement , or carrying out procurement of state - of - the - art cybersecurity products and solutions on behalf of public authorities ; ### when explicitly requested , supporting public authorities in providing guidance on public procurement procedures , including for procurement of state - of - the - art cybersecurity products and solutions ;


### providing financial support and technical assistance to cybersecurity start - ups and smes to connect to potential markets and to attract investment ; ### providing financial support and technical assistance to cybersecurity start - ups and smes to connect to potential markets , enhance expertise on cybersecurity in these companies and to attract investment to be able to implement cybersecurity products and solutions and / or to become competitive players in the field ;


### providing financial support and technical assistance to cybersecurity start - ups and smes to connect to potential markets and to attract investment ; ### providing financial support and technical assistance to cybersecurity start - ups , individual experts and smes to connect to potential markets and deployment opportunities , and to attract investment ;


### improve the understanding of cybersecurity and contribute to reducing skills gaps in the union related to cybersecurity by carrying out the following tasks : ### improve the understanding of cybersecurity , including of individuals ; raise awareness of the importance of cybersecurity for pre - empting and addressing threats , contribute to reducing skills gaps , strengthening the level of skills in the union related to cybersecurity and build a strong cyber skills base by carrying out the following tasks :


### supporting further development of cybersecurity skills , where appropriate together with relevant eu agencies and bodies including enisa . ### supporting further development , pooling and sharing of cybersecurity skills and competences , where appropriate together with relevant eu agencies and bodies including enisa and supporting the objective on advanced digital skills of the digital europe programme where appropriate .


### the nominated national coordination centre shall have the capability to support the competence centre and the network in fulfilling their mission laid out in article 3 of this regulation . they shall possess or have direct access to technological expertise in cybersecurity and be in a position to effectively engage and coordinate with industry , the public sector and the research community . ### the nominated national coordination centre shall have the capability to support the competence centre and the network in fulfilling their mission laid out in article 3 of this regulation . they shall possess or have direct access to technological expertise in cybersecurity and be in a position to effectively engage and coordinate with industry , the public sector , the research community and citizens .


### the relationship between the competence centre and the national coordination centres shall be based on a contractual agreement signed between the competence centre and each of the national coordination centres . the agreement shall provide for the rules governing the relationship and division of tasks between the competence centre and each national coordination centre . ### the relationship between the competence centre and the national coordination centres shall be based on a contractual agreement harmonised on union level and signed between the competence centre and each of the national coordination centres . the agreement shall provide for the rules governing the relationship and division of tasks between the competence centre and each national coordination centre .


### assessing requests by entities established in the same member state as the coordination centre for becoming part of the cybersecurity competence community . ### assessing requests by entities and individuals established in the same member state as the coordination centre for becoming part of the cybersecurity competence community ;


### the cybersecurity competence community shall consist of industry , academic and non - profit research organisations , and associations as well as public entities and other entities dealing with operational and technical matters . it shall bring together the main stakeholders with regard to cybersecurity technological and industrial capacities in the union . it shall involve national coordination centres as well as union institutions and bodies with relevant expertise . . ### the cybersecurity competence community shall consist of civil society , industry , including smes , the european standardisation organisations , associations of users , academic and non - profit research organisations , and associations operating at national or at european level , as well as public entities and other entities or individuals dealing with operational and technical matters . it shall bring together the main stakeholders with regard to cybersecurity technological and industrial , societal , academic and research capacities and capabilities in the union . it shall involve national coordination centres as well as union institutions and bodies with relevant expertise .


### only entities which are established within the union may be accredited as members of the cybersecurity competence community . they shall demonstrate that they have cybersecurity expertise with regard to at least one of the following domains : ### entities which are accredited as members of the cybersecurity competence community shall demonstrate that they have cybersecurity expertise in one or more eu member states with regard to at least one of the following domains :


### the competence centre shall accredit entities established under national law as members of the cybersecurity competence community after an assessment made by the national coordination centre of the member state where the entity is established , on whether that entity meets the criteria provided for in paragraph 3 . an accreditation shall not be limited in time but may be revoked by the competence centre at any time if it or the relevant national coordination centre considers that the entity does not fulfil the criteria set out in paragraph 3 or it falls under the relevant provisions set out in article 136 of regulation xxx [ new financial regulation ] . ### the competence centre shall accredit entities as members of the cybersecurity competence community based on an assessment on whether an entity meets the criteria provided for in paragraph 3 . an accreditation shall not be limited in time but may be revoked by the competence centre or the relevant national coordination centre if the entity stops fulfilling the criteria set out in paragraph 3 or it falls under the relevant provisions set out in article 136 of regulation xxx [ new financial regulation ]


### such cooperation shall take place within the framework of working arrangements . those arrangements shall be submitted to the prior approval of the commission . ### such cooperation shall take place within the framework of working arrangements agreed between the competence centre and the respective union institution , body , office or agency . those arrangements shall be submitted to the prior approval of the commission , as well as for information to the european parliament .


### the governing board shall be composed of one representative of each member state , and five representatives of the commission , on behalf of the union . ### the governing board shall be composed of one representative of each member state and five representatives of the commission , on behalf of the union . the governing board shall also include one member designated by the european parliament , with no voting rights .


### promote the competence centre globally , so as to raise its attractiveness and make it a world - class body for excellence in cybersecurity ; ### promote the competence centre globally by promoting its excellence and attractiveness , so as to raise its attractiveness and make it a world - class body for excellence in cybersecurity ; to this end supports collaboration with global players ;


### adopt an anti - fraud strategy that is proportionate to the fraud risks having regard to a cost - benefit analysis of the measures to be implemented ; ### adopt an anti - fraud and anti - corruption strategy that is proportionate to the fraud and corruption risks having regard to a cost - benefit analysis of the measures to be implemented , as well as adopt adequate protection measures for whistleblowers ;


### the governing board shall elect a chairperson and a deputy chairperson from among the members with voting rights , for a period of two years . the mandate of the chairperson and the deputy chairperson may be extended once , following a decision by the governing board . if , however , their membership of the governing board ends at any time during their term of office , their term of office shall automatically expire on that date . the deputy chairperson shall ex officio replace the chairperson if the latter is unable to attend to his or her duties . the chairperson shall take part in the voting . ### the governing board shall have a chairperson and a deputy chairperson , which shall be respectively the chairperson and deputy chairperson of the management board of enisa . their mandate shall be of the same duration as for the management board of enisa .


### the executive director shall be appointed by the governing board from a list of candidates proposed by the commission , following an open and transparent selection procedure . ### the executive director shall be appointed by the governing board from a list of candidates proposed by the commission , following an open , transparent and non - discriminatory selection procedure , while respecting gender equality .


### prepare an action plan following - up conclusions of internal or external audit reports , as well as investigations by the european anti - fraud office and reporting on progress twice a year to the commission and regularly to the governing board ; ### prepare an action plan following - up conclusions of internal or external audit reports , as well as investigations by the european anti - fraud office and reporting on progress twice a year to the european parliament and the commission and regularly to the governing board ;


### members of the industrial and scientific advisory board shall have expertise either with regard to cybersecurity research , industrial development , professional services or the deployment thereof . the requirements for such expertise shall be further specified by the governing board . ### members of the industrial and scientific advisory board shall have cybersecurity expertise with regard to at least one of the following domains : research ; industrial development ; training and education .


### the industrial and scientific advisory board shall advise the competence centre in respect of the performance of its activities and shall : ### the industrial and scientific advisory board shall regularly advise the competence centre in respect of the performance of its activities and shall :


### provide to the executive director and the governing board strategic advice and input for drafting the work plan and multi - annual strategic plan within the deadlines set by the governing board ; ### provide to the executive director and the governing board strategic advice and input for the strategic orientation and operations of the competence centre as far as industry and science is concerned , and for drafting the work plan and multi - annual strategic plan within the deadlines set by the governing board ;


### promote and collect feedback on the work plan and multi - annual strategic plan of the competence centre . ### promote and collect feedback on the work plan and multi - annual strategic plan of the competence centre and advise the governing board on how to improve the competence centre’s strategic orientation and operation according to this feedback .


### the maximum union contribution shall be paid from the appropriations in the general budget of the union allocated to [ digital europe programme ] and to the specific programme implementing horizon europe , established by decision xxx . ### the maximum union contribution shall be paid from the appropriations in the general budget of the union allocated to [ digital europe programme ] , to the specific programme implementing horizon europe , established by decision xxx and to the european defence fund .


### the competence centre shall take appropriate measures to ensure that , when actions financed under this regulation are implemented , the financial interests of the union are protected by the application of preventive measures against fraud , corruption and any other illegal activities , by effective checks and , if irregularities are detected , by the recovery of the amounts wrongly paid and , where appropriate , by effective , proportionate and dissuasive administrative sanctions . ### the competence centre shall take appropriate measures to ensure that , when actions financed under this regulation are implemented , the financial interests of the union are protected by the application of preventive measures against fraud , corruption and any other illegal activities , by regular and effective checks and , if irregularities are detected , by the recovery of the amounts wrongly paid and , where appropriate , by effective , proportionate and dissuasive administrative sanctions .


### the staff of the competence centre shall consist of temporary staff and contract staff . ### the staff of the competence centre shall be gender balanced and consist of temporary staff and contract staff .


### the competence centre shall carry out its activities with a high level of transparency . ### the competence centre shall carry out its activities with the highest level of transparency .


### the competence centre shall ensure that the public and any interested parties are given appropriate , objective , reliable and easily accessible information , in particular with regard to the results of its work . it shall also make public the declarations of interest made in accordance with article 41 . ### the competence centre shall ensure that the public and any interested parties are given appropriate , objective , reliable and easily accessible information in due time , in particular with regard to the results of its work . it shall also make public the declarations of interest made in accordance with article 41 .


### the evaluation referred to in paragraph 2 shall include an assessment of the results achieved by the competence centre , having regard to its objectives , mandate and tasks . if the commission considers that the continuation of the competence centre is justified with regard to its assigned objectives , mandate and tasks , it may propose that the duration of the mandate of the competence centre set out in article 46 be extended . ### the evaluation referred to in paragraph 2 shall include an assessment of the results achieved by the competence centre , having regard to its objectives , mandate and tasks . if the commission considers that the continuation of the competence centre is justified with regard to its assigned objectives , mandate , tasks , effectiveness and efficiency , it may propose that the duration of the mandate of the competence centre set out in article 46 be extended .


### the evaluation referred to in paragraph 2 shall include an assessment of the results achieved by the competence centre , having regard to its objectives , mandate and tasks . if the commission considers that the continuation of the competence centre is justified with regard to its assigned objectives , mandate and tasks , it may propose that the duration of the mandate of the competence centre set out in article 46 be extended . ### the evaluation referred to in paragraph 2 shall include an assessment of the results achieved by the competence centre , having regard to its objectives , mandate and tasks , as well as an assessment of the effectiveness and efficiency of the competence centre in achieving those results . if the commission considers that the continuation of the competence centre is justified with regard to its assigned objectives , mandate and tasks , it may propose that the duration of the mandate of the competence centre set out in article 46 be extended .


### &#8220 ; drift net&#8221 ; means : any gillnet held on the sea surface or at a certain distance below it by floating devices , drifting with the current , either independently or with the boat to which it may be attached . it may be equipped with devices aiming to stabilise the net or to limit its drift . ### article 2a amendment of regulation no 894 / 97 regulation no 894 / 97 shall be amended as follows : article 11 , paragraph 1 is replaced by the following : ‘ 1 . ' driftnet ' means a net made up of one or more walls of netting , hung jointly in parallel on the headline , held on the sea surface or at a certain distance below the surface by floating devices and drifting with the current , either independently or with the boat to which it may be attached . it may be equipped with devices aiming to stabilise the net or to limit its drift , such as a sea - anchor or an anchor on the bottom attached at one single end of the net . ’


### it is necessary to specify the objectives of sis , its technical architecture and its financing , to lay down rules concerning its end - to - end operation and use and to define responsibilities , the categories of data to be entered into the system , the purposes for which the data are to be entered , the criteria for their entry , the authorities authorised to access the data , the use of biometric identifiers and further rules on data processing . ### it is necessary to specify the objectives of sis , its technical architecture and its financing , to lay down rules concerning its end - to - end operation and use and to define responsibilities , the categories of data to be entered into the system , the purposes for which the data are to be entered , the criteria for their entry , rules on the deletion of alerts , the authorities authorised to access the data , the use of biometric identifiers and further rules on data protection and data processing


### it is necessary to maintain a manual setting out the detailed rules for the exchange of certain supplementary information concerning the action called for by alerts . national authorities in each member state , should ensure the exchange of this information . ### it is necessary for the co - legislators to approve the maintenance of a manual setting out the detailed rules for the exchange of certain supplementary information concerning the action called for by alerts . national authorities in each member state , should ensure the exchange of this information .


### member states should make the necessary technical arrangement so that each time the end - users are entitled to carry out a search in a national police or immigration database they also search sis in parallel in accordance with article 4 of directive 2016 / 680 of the european parliament and of the council45 . this should ensure that sis functions as the main compensatory measure in the area without internal border controls and better address the cross - border dimension of criminality and the mobility of criminals . _________________ 45 directive 2016 / 680 of the european parliament and of the council of 27 april 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention , investigation , detection or prosecution of criminal offences or the execution of criminal penalties , and on the free movement of such data and repealing council framework decision 2008 / 977 / jha , oj l 119 , 4 . 5 . 2016 . ### member states should make the necessary technical arrangement so that each time the end - users are entitled to carry out a search in a national police or immigration database they are also entitled to search sis in parallel in accordance with article 4 of directive 2016 / 680 of the european parliament and of the council45 . this should help ensure that sis functions as the main compensatory measure in the area without internal border controls and better address the cross - border dimension of criminality and the mobility of criminals . _________________ 45 directive 2016 / 680 of the european parliament and of the council of 27 april 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention , investigation , detection or prosecution of criminal offences or the execution of criminal penalties , and on the free movement of such data and repealing council framework decision 2008 / 977 / jha , oj l 119 , 4 . 5 . 2016 .