ENISA serves as the CSIRTs Network’s secretariat and supports the cooperation and coordination of CSIRTs during cybersecurity incidents.
![](https://www.enisa.europa.eu/topics/incident-response/csirts-network/@@images/98d75688-df73-4c61-b6c3-7da713b6e2e2.png)
CSIRTs Network
The CSIRTs Network is a network where members can cooperate, exchange information and build trust. Members are able to improve the handling of cross-border incidents and discuss how to respond in a coordinated manner to specific incidents.
The CSIRTs Network is composed of CSIRTs appointed by EU Member States and CERT- EU ('CSIRTs Network members'). The European Commission participates in the network as an observer. ENISA actively supports cooperation between CSIRTs, provides the secretariat and supports incident coordination upon request.
Background
The CSIRTs Network was established by the NIS Directive 1 and strengthen by the NIS Directive 2 which entered into force in 2023 "in order to contribute to the development of confidence and trust and to promote swift and effective operational cooperation among Member States“. The mission of the CSIRTs Network is to
- exchange information
- build trust
- to discuss and, where possible, implement a coordinated response to an incident
- to provide Member States with assistance in addressing cross-border incidents;
- to cooperate, exchange best practices and provide assistance to the CSIRTs designated for the coordinated disclosure of vulnerabilities which could have a significant impact on entities in more than one Member State.
ENISA is powering the CSIRTs Network by providing the Secretariat, infrastructures and tools to enable effective cooperation.