Amendment 502· Digital Omnibus proposal Recital 50a (new)

(50a)A layered architecture also strengthens the security and resilience of incident reporting. By limiting the concentration of sensitive information within a single body and by relying on the involvement of national authorities, such an architecture reduces the systemic risk associated with a single point of failure. To that end, and consistently with the fact that ENISA should not, as a rule, have access to the notifications submitted through the single-entry point, the security measures referred to in this Regulation should ensure the confidentiality and integrity of information in transit between reporting entities and the competent national authorities. The EU entry point should become operational for a given Union legal act only after the Member States have assessed and confirmed that it meets those requirements and is interoperable with the national reporting arrangements. Member States should not be required to dismantle or replace functioning national reporting systems, nor to bear disproportionate adaptation costs.