Activities of Vicky FORD related to 2013/0027(COD)
Plenary speeches (2)
High common level of security of network and information systems across the Union (debate)
High common level of network and information security (debate)
Shadow reports (1)
RECOMMENDATION FOR SECOND READING on the Council position at first reading with a view to the adoption of a directive of the European Parliament and of the Council concerning measures for a high common level of security of network and information systems across the Union PDF (428 KB) DOC (76 KB)
Shadow opinions (1)
OPINION on the proposal for a directive of the European Parliament and of the Council concerning measures to ensure a high common level of network and information security across the Union
Amendments (16)
Amendment 228 #
Proposal for a directive
Article 4 – paragraph 1
Article 4 – paragraph 1
Amendment 238 #
Proposal for a directive
Article 7 – paragraph 1
Article 7 – paragraph 1
1. Each Member State shall set up at least one Computer Emergency Response Team (hereinafter: ‘CERT’) or system of multiple CERTs, covering the sectors in Annex II, responsible for handling incidents and risks according to a well- defined process, which shall comply with the requirements set out in point (1) of Annex I. A CERT may be established within the competent authority.
Amendment 241 #
Proposal for a directive
Article 7 – paragraph 5
Article 7 – paragraph 5
5. The CERT or CERTs shall act under the supervision of the competent authority, which shall regularly review the adequacy of itstheir resources, its mandates and the effectiveness of itstheir incident-handling process.
Amendment 256 #
Proposal for a directive
Article 8 – paragraph 3 – point f
Article 8 – paragraph 3 – point f
(f) cooperate and exchange information on all relevant matters with the European Cybercrime Centre within Europol, and with other relevant European bodies in particular in the fields of data protection, energy, transport, banking, stock exchanges and health;
Amendment 276 #
Proposal for a directive
Article 10 – paragraph 4
Article 10 – paragraph 4
4. Where the risk or incident subject to an early warning is of a suspected criminal nature, the national competent authorities or the Commission shall informwill liaise with national cybercrime authorities who will cooperate and exchange information with the European Cyberc Crime Centre within Europol.
Amendment 282 #
Proposal for a directive
Article 12 – paragraph 1
Article 12 – paragraph 1
1. The Commission shall be empowered to adopt, by means of implementing acts, a Union NIS cooperation planframework to ensure NIS cooperation across Member States. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 19(3).
Amendment 284 #
Proposal for a directive
Article 12 – paragraph 2 – introductory part
Article 12 – paragraph 2 – introductory part
2. The Union NIS cooperation planframework shall provide for:
Amendment 292 #
Proposal for a directive
Article 14 – paragraph 1
Article 14 – paragraph 1
1. Member States shall ensure that public administrations and market operators take appropriate technical and organisational measures to manage the risks posed to the security of the networks and information systems which they control and use in their operations. Having regard to the state of the art, these measures shall guarantee a level of security appropriate to the risk presented. In particular, measures shall be taken to prevent and minimise the impact of incidents affecting their network and information system on the core services they provide and thus ensure the continuity of the services underpinned by those networks and information systems.
Amendment 296 #
Proposal for a directive
Article 14 – paragraph 2
Article 14 – paragraph 2
2. Member States shall ensure that public administrations andmechanisms are in place to enable market operators to notify to the competent authority of incidents havingthat have a significant impact on the security of the core services they provide.
Amendment 305 #
Proposal for a directive
Article 14 – paragraph 4
Article 14 – paragraph 4
4. The competent authority may inform the public, or require the public administrations and market operators to do so, where it determines that disclosure of the incident is in the public interest. Once a year, the competent authority shall submit a summary report to the cooperation network on the notifications received and the action taken in accordance with this paragraph. In case of incidents notified to the cooperation network referred to in Article 8, other national competent authorities shall not make public any information received on risks or incidents without approval of the notifying competent authority.
Amendment 311 #
Proposal for a directive
Article 14 – paragraph 5
Article 14 – paragraph 5
Amendment 315 #
Proposal for a directive
Article 14 – paragraph 6
Article 14 – paragraph 6
6. Subject to any delegated act adopted under paragraph 5, the competent authorities may adopt guidelines and, where necessary, issue instructionThe competent authorities or single points of contact shall adopt guidelines concerning the circumstances in which public administrations and market operators are required to notify incidents.
Amendment 317 #
Proposal for a directive
Article 14 – paragraph 7
Article 14 – paragraph 7
Amendment 319 #
Proposal for a directive
Article 14 – paragraph 8
Article 14 – paragraph 8
8. Paragraphs 1 and 2 shall not apply to microenterprises and SMEs as defined in Commission Recommendation 2003/361/EC of 6 May 2003 concerning the definition of micro, small and medium- sized enterprises35. __________________ 35 OJ L 124, 20.5.2003, p. 36.
Amendment 330 #
Proposal for a directive
Article 16 – paragraph 1
Article 16 – paragraph 1
1. To ensure convergent implementation of Article 14(1), Member States, without prescribing the use of any particular technology, shall encourage the use of interoperable standards and /or specifications relevant to networks and information security. Such standards and/or specifications where appropriate shall take into account international and/or global equivalents.
Amendment 334 #
Proposal for a directive
Article 16 – paragraph 2
Article 16 – paragraph 2
2. The Commission shall draw up, by means of implementing actsAn industry-led taskforce shall draw up a list of the standards and/or specifications referred to in paragraph 1. The list shall be published in the Official Journal of the European Un with the help of the Commission.