Amendment 503· Digital Omnibus proposal Recital 51

Before enabling the notification of incidents, ENISA should pilot the functioning of the single-entry point which should include a thorough testing of the specificities and requirements for the notifications for the relevant Union legal acts. Based on the results of the piloting, the Commission should assess the proper functioning, reliability, integrity and confidentiality of the single-entry point. The Commission should consult the CSIRTs network and the competent authorities under the relevant Union legal acts, by making use of existing cooperation groups and networks of Member States established under these acts, when carrying out the assessment. Where the Commission finds that the single-entry point ensures the proper functioning, reliability, integrity and confidentiality, it should publish a notice to that effect in the Official Journal of the European Union. In case the Commission considers that the proper functioning, reliability, integrity and confidentiality is not ensured, ENISA should take all necessary corrective measures, followed by a reassessment by the Commission.

It is important to support the further harmonisation of incident notification and reporting, including by working on the exchange and interoperability of information regarding incident reporting. For this purpose and in cooperation withhe CSIRTs network, the Cooperation Group and competent authorities under the relevant Union legal acts, ENISA should develop guidelines to foster the harmonisation of incident notifications.