S.L. 460.41 Art. 16National cyber crisis management framework. 

(1) There shall be established a national cyber crisis management framework which shall establish the management and coordination of large-scale cybersecurity incidents and crises in Malta, including the:

(a) identifying of capabilities, assets and procedures that may be deployed in the case of a large-scale cybersecurity incident or crisis for the purposes of this order; and

(b) drawing up of a national large-scale cybersecurity incident and crisis response plan where the objectives of, and arrangements for, the management of large-scale cybersecurity CYBERSECURITY ACROSS THE EUROPEAN UNION 460.41 (MALTA)

incidents and crises are established.

(2) The plan shall establish, in particular:

(a) the objectives of national preparedness measures and activities;

(b) the cyber crisis management authorities including tasks and responsibilities;

(c) the cyber crisis management procedures, including their integration into the general national crisis management framework and information exchange means;

(d) national preparedness measures, including exercises and training activities;

(e) the relevant public and private stakeholders and infrastructure involved;

(f) national procedures and arrangements between relevant national authorities and bodies to ensure Malta’s effective participation in, and support of, the coordinated management of large-scale cybersecurity incidents and crises at Union level; and

(g) the common or standardised practices, classification schemes and taxonomies to be used in relation to cyber crisis management.

(3) The crisis management authorities shall have adequate resources to carry out, in an effective and efficient manner, the tasks referred to in sub-article (2).

(4) The framework shall be coherent with the existing frameworks for general national crisis management.

(5) The CIP Department shall be the leading national representative for the purposes of cyber crisis management to the European cyber crisis liaison organisation network (EU CyCLONe) established in accordance with Article 16 of the Directive (EU) 2022/