CER Directive: Member States identify critical entities
Member States had to finish their national risk assessment by 17 January 2026 and identify the critical entities in their territory by 17 July 2026. An entity that is notified has ten months from the notification to meet the resilience obligations: a risk assessment of its own, resilience measures, incident reporting and background checks for certain staff.
Ticks are kept in this browser only. Sign in to the client portal to share them with your team.