Changing legal framework for resilience of critical entities

Abstract

The legal basis for critical infrastructure protection at EU level dates back to December 2008. Based on the Council Directive 2008/114/EC on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection, Hungary is currently regulated by Act CLXVI of 2012 on the identification, designation and protection of critical systems and infrastructures, Government Decree 65/2013 (8.III.) on the implementation of Act CLXVI of 2012 on the identification, designation and protection of critical systems and infrastructures and nine sectoral government decrees. A review of the more than fifteen years of Council Directive 2008/114/EC legislation, involving Member States, has been initiated in recent years, resulting in the publication of Directive 2022/2557/EU on the resilience of critical entities and repealing Council Directive 2008/114/EC (CER Directive) on 14 December 2022.