S.L. 460.35 ст. 6CSIRTs. 

(1) There shall be a National CSIRT within the CIIP

Unit, to be known as CSIRTMalta which shall comply with the requirements and tasks set out in paragraphs 1 and 2 of the First Schedule respectively, covering at least the sectors referred to in the Second Schedule and the services referred to in the Third Schedule. CSIRTMalta shall be responsible for risk and incident handling in accordance with a well-defined process.

(2) CSIRT Malta shall inform the CIIP Unit about incident notifications submitted pursuant to this order.

(3) Operators of an essential service shall receive CSIRT monitoring services from any of the following CSIRTs which shall comply with the requirements and tasks set out in paragraphs 1 and 3 respectively of the First Schedule:

(a) an internal CSIRT providing CSIRT monitoring services and alerts within operators of essential services;

(b) an autonomous CSIRT may be contracted to perform CSIRT monitoring services.

(4) Any operator of essential services which fails to establish a CSIRT as provided for in sub-article (3) shall be liable to an administrative fine in accordance with the procedure under article 19.

(5) The Department and CIIP Unit shall cooperate for the better fulfilment of the obligations laid down in this order.