Translations:Cyber Security Act (CSA)/17/en

The proposal introduces a definition of "managed security services" which is based on the definition of "providers of managed security services" in the NIS 2 Directive. Managed security services are services that consist of carrying out or supporting activities related to their customers' cybersecurity risk management (Art. 1 Para 2 CSA-N). Furthermore, a new Article 51a is inserted on the security objectives of European cybersecurity certification schemes tailored to managed security services. On this basis, the EU Commission can adopt a delegated act for a certification scheme for managed security services.