CER Directive

The Critical Entities Resilience (CER) Directive is an EU law that aims to strengthen the resilience of critical entities against a range of threats, including natural hazards, terrorist attacks, insider threats, sabotage, and public health emergencies.

It applies to critical entities that provide essential services for the maintenance of vital societal functions or economic activities. The CER Directive covers eleven key sectors: energy, transport, banking, financial market infrastructures, health, drinking water, wastewater, digital infrastructure, public administration, space, and the production, processing, and distribution of food.

Member States are required to adopt national strategies and conduct regular risk assessments to identify critical entities. Critical entities must conduct risk assessments, implement resilience measures, and notify competent authorities of disruptive incidents. The CER Directive entered into force on January 16, 2023, and EU Member States had until October 17, 2024, to adopt national legislation to transpose the Directive.