GRCCopilot
Sign In
European Union

CER Directive

EU framework for strengthening the resilience of critical entities against physical, cyber and operational disruptions

Start Assessment Create Free Account
19
Controls
19
Questions
Active
Status

About this Framework

The Critical Entities Resilience (CER) Directive establishes requirements for organizations operating essential services and critical infrastructure. The directive requires risk assessments, resilience measures, incident reporting, business continuity planning and protection against natural, physical and cyber threats.

Key Control Domains

Critical Infrastructure Protection
Business Continuity
Risk Management
Physical Security
Cyber Resilience
Supply Chain Resilience
Incident Management
Operational Resilience

Who Needs This?

  • Energy Operators
  • Transport Providers
  • Healthcare Organizations
  • Financial Institutions
  • Government Agencies
  • Critical Infrastructure Operators

Compliance Benefits

  • Compliance with EU resilience requirements
  • Improved operational continuity
  • Enhanced preparedness for disruptions
  • Reduced systemic risk across critical sectors

Official Reference

CER Directive (EU 2022/2557)
https://eur-lex.europa.eu

Assessment Details

Issuer / AuthorityEuropean Union
FrameworkCER Directive
Controls19
Questions19
StatusActive
Assessment Start03 Jun 2026

Share this Assessment

Share this permanent link with your team, clients or auditors.

https://grcopilot.app/frameworks/cer-directive

Sign in to begin this assessment

Create a free GRC Copilot account to access this and 50+ other security and compliance frameworks.