Framework
Full specification

CER

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

The Critical Entities Resilience (CER) Directive is an EU law focused on strengthening the resilience of critical entities providing essential services across various sectors, ensuring they can withstand a range of threats and hazards .

The Critical Entities Resilience (CER) Directive is an EU law that aims to strengthen the resilience of critical entities against a range of threats, including natural hazards, terrorist attacks, insider threats, sabotage, and public health emergencies.

It applies to critical entities that provide essential services for the maintenance of vital societal functions or economic activities. The CER Directive covers eleven key sectors: energy, transport, banking, financial market infrastructures, health, drinking water, wastewater, digital infrastructure, public administration, space, and the production, processing, and distribution of food.

Member States are required to adopt national strategies and conduct regular risk assessments to identify critical entities. Critical entities must conduct risk assessments, implement resilience measures, and notify competent authorities of disruptive incidents. The CER Directive entered into force on January 16, 2023, and EU Member States had until October 17, 2024, to adopt national legislation to transpose the Directive.

Tasks
18
Scope
EU
Want to see how Cyberday helps users address
CER
compliance?
Here's what
CER
requires and how to comply.

Below you'll find all of the requirements of this framework. In Cyberday, we map all requirement to global tasks, making multi-compliance management easy. Do it once, and see the progress across all frameworks!

Requirements
15.1: Incident notification
12.1: Risk assessments
12.2: Risk assessment measures
14.2: Rules of background checks
14.3: Conducting a background check
14.1: Background checks
13.1.f: Raise awareness
13.3: Designated personnel
13.1.c: Responding to incidents
13.1.d: Recovering from incidents
13.1.a: Preventing incidents
13.2: Resilience Plan
13.1.e: Ensure adequate employee security management
13.1.b: Ensure adequate physical protection
CER
learning hub

Explore our comprehensive resources and improve your security with the themes of this framework.

How Cyberday helps with
CER

Discover specific ways our platform streamlines your ISO 27001 compliance process, from automated controls to audit preparation.

Explore use case
Free
CER
assessment

Take our comprehensive assessment to identify gaps in your current implementation and get personalized recommendations.

Start assessment
Read more about
CER

Dive deeper with our articles, case studies, and expert insights on framework implementation.

Read article
Guide to compliance

Get a concise overview of all requirements, controls, and implementation steps in our quick guide.

Get the guide
Framework comparison

See how the overlap and differences with any other framework to optimize your compliance strategy.

Compare framework
Join a live
CER
webinar

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
Join our live webinars

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
What are frameworks?

Understand the basics of cyber security frameworks with our comprehensive guide.

Read the article

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.