A good practice collection for CERTs on the Directive on attacks against information systems

This Good Practice Collection was produced at the initiative of the European Network and Information Security Agency (ENISA) in the context of its support activities to ensure the efficient functioning of CERTs/CSIRTs and their cooperation with law enforcement agencies (LEAs) in the face of a new development in European cybercrime policy.

The report serves two major goals, which both aim at supporting CERTs/CSIRTs: Firstly to provide an analysis of the legal framework created by Directive 2013/40/EU on attacks against information systems, coupled with a stock taking on relevant existing national activities and good practices; secondly, the identification of key areas and, where appropriate, guidelines and recommendations derived from these good practices.