The organisation must formally appoint individuals to key security and emergency roles. Once these appointments are finalised, the Danish Energy Agency must be officially notified of the updated personnel.
Roles to be appointed:
- Emergency Coordinator: coordinates all emergency planning efforts, including the preparation of risk and vulnerability assessments
- Cyber Coordinator: coordinates network and information system security measures while also assisting in emergency planning for these systems
- Security Coordinator: coordinates on-site security measures at applicable company facilities
The responsibilities for each role should be clearly documented. This should include their duties in emergency planning, cybersecurity, physical security, and their coordination with each other to maintain a comprehensive risk overview. The organisation should also ensure that the relevant authorities are notified of the contact information for these roles.
The company's management body must hold quarterly meetings with the Emergency, Cyber, and Security Coordinators. The purpose of these meetings is to review and make decisions on the company's overall organizational emergency preparedness, physical security, and cybersecurity.
A formal report, based on discussions and decisions, must be created and maintained after each meeting, including the meeting minutes. This report will be the official record of the decisions made by the management body.