{
  "url": "https://openlegislation.uk/network-and-information-systems-regulations-2018/regulation-5",
  "json_url": "https://openlegislation.uk/network-and-information-systems-regulations-2018/regulation-5.json",
  "legislation": "uksi/2018/506",
  "legislation_title": "The Network and Information Systems Regulations 2018",
  "legislation_url": "https://openlegislation.uk/network-and-information-systems-regulations-2018",
  "path": "regulation/5",
  "kind": "regulation",
  "number": "5",
  "heading": "Designation of computer security incident response team",
  "text": "(1) GCHQ is designated as the CSIRT for the United Kingdom in respect of the relevant sectors and digital services.\n(2) The CSIRT must—\n(a) monitor incidents in the United Kingdom;\n(b) provide early warning, alerts, announcements and dissemination of information to relevant stakeholders about risks and incidents;\n(c) respond to any incident notified to it under regulation 11(5)(b) or regulation 12(8);\n(d) provide dynamic risk and incident analysis and situational awareness;\n(e) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n(f) establish relationships with the private sector to facilitate co-operation with that sector;\n(g) promote the adoption and use of common or standardised practices for—\n(i) incident and risk handling procedures, and\n(ii) incident, risk and information classification schemes; and\n(h) co-operate with NIS enforcement authorities to enable the enforcement authorities to fulfil their obligations under these Regulations.\n(3) The CSIRT may co-operate with or participate in international co-operation networks (including the CSIRTs network) if the CSIRT considers it appropriate to do so.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Reg. 5(2)(e) omitted (20.1.2021) by virtue of The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 6(a); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Reg. 5(3) substituted (20.1.2021) by The Network and Information Systems (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/653), reg. 1(2), Sch. para. 6(b); 2020 c. 1, Sch. 5 para. 1(1)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2018/506/regulation/5",
    "retrieved_at": "2026-10-28T22:58:45.652382+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}