Article 22 Union level coordinated security risk assessments of critical supply chains

The Cooperation Group, in cooperation with the Commission and ENISA, may carry out coordinated security risk means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; assessments of specific critical ICT services means an ICT service as defined in Article 2, point (13), of Regulation (EU) 2019/881;, ICT systems or ICT products means an ICT product as defined in Article 2, point (12), of Regulation (EU) 2019/881; supply chains, taking into account technical and, where relevant, non-technical risk means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; factors.

The Commission, after consulting the Cooperation Group and ENISA, and, where necessary, relevant stakeholders, shall identify the specific critical ICT services means an ICT service as defined in Article 2, point (13), of Regulation (EU) 2019/881;, ICT systems or ICT products means an ICT product as defined in Article 2, point (12), of Regulation (EU) 2019/881; that may be subject to the coordinated security risk means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; assessment referred to in paragraph 1.