S.L. 460.41 Art. 26Cybersecurity information- sharing arrangements. 

(1) The national CSIRT shall ensure that the entities falling within the scope of this order and, where relevant, other

CSIRTs of entities not falling within the scope of this order are able to exchange on a voluntary basis relevant cybersecurity information among themselves, including information relating to cyber threats, near misses, vulnerabilities, techniques and procedures, indicators of compromise, adversarial tactics, threat-actor-specific information, cybersecurity alerts and recommendations regarding the configuration of cybersecurity tools to detect cyberattacks, where such information sharing:

(a) aims to prevent, detect, respond to or recover from incidents or to mitigate their impact;

(b) enhances the level of cybersecurity, in particular through raising awareness in relation to cyber threats, limiting or impeding the ability of such threats to spread, supporting a range of defensive capabilities, vulnerability remediation and disclosure, threat detection, containment and prevention techniques, mitigation strategies, or response and recovery stages or promoting collaborative cyber threat research between public and private entities:

Provided that the cybersecurity information sharing arrangement shall be without prejudice, to the operator security plan of the entities falling within the scope of this order, pursuant to article 19(1)(c)(iii).

(2) The national CSIRT shall ensure that the exchange of information takes place within communities of essential and important entities, and where relevant, their suppliers or service providers. Such exchange shall be implemented by means of cybersecurity information-sharing arrangements in respect of the potentially sensitive nature of the information shared. CYBERSECURITY ACROSS THE EUROPEAN UNION 460.41 (MALTA)

(3) The national CSIRT, shall facilitate the establishment of cybersecurity information-sharing arrangements in sub-article (2). Such arrangements may specify operational elements, including the use of dedicated ICT platforms and automation tools, content and conditions of the information-sharing arrangements:

Provided that in establishing the details of the involvement of public authorities in such arrangements, the national CSIRT may impose conditions on the information made available by any competent authority or CSIRTs. The national CSIRT shall offer assistance for the application of such arrangements in accordance with its policies provided for in article 15(3)(h).

(4) Essential and important entities shall notify the CIP Department of their participation in the cybersecurity information-sharing arrangements provided for in sub-article (2), upon entering into such arrangements, or as applicable, of their withdrawal from such arrangements, once the withdrawal takes effect.