Explore

Compliance for critical entities

LEGAL FRAMEWORK

On 14 December 2022, the European Union adopted Directive (EU) 2022/2557 of the European Parliament and of the Council on the resilience of critical entities and repealing Council Directive 2008/114/EC (CER Directive).

At the end of 2024, Act LXXXIV of 2024 on the resilience of critical entities (Kszetv.) was published.

Affected sectors and subsectors

Agriculture and Food

  • Food Industry
  • Agriculture
  • (Food) Distribution Networks

Health

  • Patient Care
  • Public Health
  • Pharmaceutical Supply
  • Medical Equipment Supply
  • Blood Supply

Energy

  • Electricity
  • District Heating and Cooling
  • Oil
  • (Natural) Gas
  • Hydrogen

Transport

  • Road
  • Rail
  • Water
  • Air
  • Public Transport

Information and Communication Technologies (ICT)

  • Digital Infrastructure
  • Space

Public Administration

  • Central Government Administration

Financial Sector

  • Banking Services
  • Financial Market Infrastructure

Water

  • Drinking water
  • Waste water

Explore

Obligations of critical entities

 

A critical entity must appoint or employ a person responsible for resilience (resilience manager) within 90 days designation. The entity is obliged to provide the contact details of this person to the National Directorate General for Disaster Management of the Ministry of Interior (BM OKF).

Within the deadline specified in the designation decision, the critical entity must prepare a resilience plan by completing the template defined and published on the website by the general designating authority, which must include the resilience matrix. The critical entity must submit the document electronically to the general designating authority (BM OKF) within the specified deadline. The general designating authority shall decide on the acceptance, supplementation, modification, or rejection of the resilience plan and resilience matrix prepared by the critical entity based on an assessment of the content and formal requirements.

The National Directorate General for Disaster Management (BM OKF) as a supervisory authority shall regularly, periodically, and ad hoc carry out comprehensive official inspections of critical entities, involving sectoral specialist authorities as necessary. The critical entities and the person responsible for resilience must be present during such inspections.

Explore

What Black Cell can offer for critical entities

Black Cell enables its critical entity customers in their CER/Kesztv. compliance journey with:

Key Services

  • Professional support in the preparation of the resilience plan and resilience matrix,

  • After the completion of the preparatory tasks, provisioning an appropriately qualified and qualified resilience manager for critical entities for a monthly service fee with 24/7 availability to liaise with the authorities.