Article 12, NIS 2 Directive (Proposal 16.12.2020).
Cooperation Group
1. In order to support and to facilitate strategic cooperation and the exchange of information among Member States in the field of application of the Directive, a Cooperation Group is established.
2. The Cooperation Group shall carry out its tasks on the basis of biennial work programmes referred to in paragraph 6.
3. The Cooperation Group shall be composed of representatives of Member States, the Commission and ENISA. The European External Action Service shall participate in the activities of the Cooperation Group as an observer. The European Supervisory Authorities (ESAs) in accordance with Article 17(5)(c) of Regulation (EU) XXXX/XXXX [the DORA Regulation] may participate in the activities of the Cooperation Group.
Where appropriate, the Cooperation Group may invite representatives of relevant stakeholders to participate in its work.
The Commission shall provide the secretariat.
4. The Cooperation Group shall have the following tasks:
(a) providing guidance to competent authorities in relation to the transposition and implementation of this Directive;
(b) exchanging best practices and information in relation to the implementation of this Directive, including in relation to cyber threats, incidents, vulnerabilities, near misses, awareness-raising initiatives, trainings, exercises and skills, building capacity as well as standards and technical specifications;
(c) exchanging advice and cooperating with the Commission on emerging cybersecurity policy initiatives;
(d) exchanging advice and cooperating with the Commission on draft Commission implementing or delegated acts adopted pursuant to this Directive;
(e) exchanging best practices and information with relevant Union institutions, bodies, offices and agencies;
(f) discussing reports on the peer review referred to in Article 16(7);
(g) discussing results from joint-supervisory activities in cross-border cases as referred to in Article 34;
(h) providing strategic guidance to the CSIRTs network on specific emerging issues;
(i) contributing to cybersecurity capabilities across the Union by facilitating the exchange of national officials through a capacity building programme involving staff from the Member States’ competent authorities or CSIRTs;
(j) organising regular joint meetings with relevant private interested parties from across the Union to discuss activities carried out by the Group and gather input on emerging policy challenges;
(k) discussing the work undertaken in relation to cybersecurity exercises, including the work done by ENISA.
5. The Cooperation Group may request from the CSIRT network a technical report on selected topics.
6. By … 24 months after the date of entry into force of this Directive and every two years thereafter, the Cooperation Group shall establish a work programme in respect of actions to be undertaken to implement its objectives and tasks. The timeframe of the first programme adopted under this Directive shall be aligned with the timeframe of the last programme adopted under Directive (EU) 2016/1148.
7. The Commission may adopt implementing acts laying down procedural arrangements necessary for the functioning of the Cooperation Group. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 37(2).
8. The Cooperation Group shall meet regularly and at least once a year with the Critical Entities Resilience Group established under Directive (EU) XXXX/XXXX [Resilience of Critical Entities Directive] to promote strategic cooperation and exchange of information.
Note: This is not the final text of the NIS 2 Directive. This is the text of the NIS 2 Directive Proposal of 16.12.2020.