S.L. 460.35 Art. 10Significant disruptive effect.

(1) When determining the significance of a disruptive effect as referred to in article 9(2)(c), the CIIP Unit shall take into account at least the following cross-sectoral factors:

(a) the number of users relying on the service provided by the entity concerned;

(b) the dependency of other sectors referred to in the Second Schedule on the service provided by that entity;

(c) the impact that incidents could have, in terms of degree and duration, on economic and societal activities or public safety;

(d) the market share of that entity;

(e) the geographic spread with regard to the area that could be affected by an incident;

(f) the importance of the entity for maintaining a sufficient level of the service, taking into account the availability of alternative means for the provision of that service;

(g) the dependency of a critical infrastructure, critical information infrastructure, or both, on the service provided by that entity.

(2) In order to determine whether an incident would have a OF NETWORK AND INFORMATION SYSTEMS

significant disruptive effect, the CIIP Unit shall also, where appropriate, take into account sector-specific factors.