PART 2U.K.The National Framework

Designation of the single point of contactU.K.

4.—(1) GCHQ is designated as the SPOC on the security of network and information systems for the United Kingdom.

[F1(2) The SPOC may liaise with the relevant authorities in any Member State of the EU, the Cooperation Group and the CSIRTs network if it considers it appropriate.]

[F2(2A) The SPOC must—

(a)consult and co-operate, as it considers appropriate, with relevant law enforcement authorities;

(b)co-operate with the NIS enforcement authorities to enable the enforcement authorities to fulfil their obligations under these Regulations.]

(3) The SPOC [F3may, if it considers it appropriate to do so] submit reports to—

(a)the Cooperation Group based on the incident reports it received under regulation 11(9) and 12(15), including the number of notifications and the nature of notified incidents; and

(b)the Commission identifying the number of operators of essential services for each subsector listed in Schedule 2 F4....

F5(4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F5(5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .