Tools and processes to support stress tests of critical infrastructure

With reference to the topic related additional eligibility conditions, please note that: It is full responsibility of the applicants to explain and justify how each project beneficiary fulfil the additional eligibility conditions. We invite you to fill in properly the Annex “Information about security practitioners” in the application form with all the requested information, by using the template provided in the submission IT tool. Each beneficiary, i.e. an independent legal entity participating in the project as consortium partner, can cover the role of only one type of practitioner. For example, legal entities such as Ministries of Interiors cannot cover both the role of Police Authorities and Forensic Institutes. The proposal will have to indicate clearly which type of practitioners the entity represents. Clarifications on the type of practitioners required in the topic related additional eligibility conditions: Critical infrastructure operator : In the context of the Work Programme, a critical infrastructure operator may be a private or public entity in charge of operations of critical infrastructure (understood as an asset, a facility, an equipment, a network or a system, or a part of the before mentioned), providing essential service(s) at the national, regional or local level (subject to specific topic requirements).Please consult the CER Directive for related definitions. Authority responsible for critical infrastructure resilience : In the context of the Work Programme, these entities are typically competent authorities designated by the EU Member States (or Associated Countries) in accordance with their national, responsible for the resilience of critical infrastructures against a range of threats, including natural hazards, terrorist attacks, insider threats, or sabotage, as well as public health emergencies. Civil protection authority: In the context of the Work Programme, a Civil protection authority is typically a competent authority designated by the EU Member States (or Associated Countries) in accordance with their national law that is responsible for the protection of people, the environment and property against all kinds of natural and human-induced disasters. Along with the deployment of forces and equipment in response to an emergency, typical tasks also involve the planning and preparation for such events. Law enforcement or private companies delivering security for critical infrastructure : Law Enforcement Agencies (LEAs) are typically national or regional authorities responsible for maintaining law and order, preventing and investigating crimes, and protecting citizens. Private companies delivering security are typically commercial entities that offer security services to protect critical infrastructures. Critical infrastructures refer to assets, systems, and networks that are essential for the functioning of a society and economy (please consult the CER directive for definitions). LEAs are typically responsible for maintaining law and order, PSCs can provide specialized security services to supplement LEA efforts and enhance the overall security posture of critical infrastructure. LEAs and private companies typically provide a range of security services to protect critical infrastructure, including: Access control and surveillance; Patrols and guarding; Threat assessment and risk management; Emergency response planning and training; Intelligence gathering and sharing; Cybersecurity measures (e.g., network monitoring, incident response).