Operators of Essential Services
According to Act No. 69/2018 Coll on cybersecurity the essential service is a service recognized in the list of essential services and
- is depending on networks and information systems and is carried out at least in one sector or subsector,
- is an information system of public administration, or
- is an element of critical infrastructure.
The Authority shall add an essential service to the list of essential services and its operator to the registry of essential services operators
- on the basis of the notification of a service operator,
- on the basis of an initiative of a central body, if an excess of the identification criteria of the operated service was reached,
- on the basis of own initiative if they learned on the excess of identification criteria and there was not made any step in accordance to previous items.
Impact identification criteria taking into account especially
|
|
|
|
|
|
Specific sectorial identification criteria are taking into account criteria given by general binding regulation issued by the Authority.
The service operator is obliged to notice the Authority the excess of the impact criteria at least within 30 days since the excess discovery. They notice the Authority the specific sector criteria excess within the same period and even in case the impact criteria excess was not recognised.