The EU Critical Entities Resilience (CER) Directive is changing how organisations across Europe think about risk. It covers eleven essential sectors, from energy and transport to drinking water, health and digital infrastructure. Every one of them must now account for natural hazards and climate risk.
Designated critical entities must assess natural disasters, accidents, public health emergencies and hybrid threats. They must also keep that assessment up to date as risk changes. It is not a one-off exercise.
This is often the least understood part of the regulation. Many teams treat hazard and risk as the same thing. They are not. A hazard is the potential for a damaging event. Risk is what that event could actually cost once you know what is exposed and how vulnerable it is. The Directive asks about risk.
Our new whitepaper explains what CER requires and how to get started. Inside, you will find:
National laws are arriving country by country. Each new law starts a nine-month clock for the organisations it designates. The sooner your team understands the requirements, the more time you have to prepare.