This Council Recommendation presents the EU Blueprint for a Coordinated Response to Large-Scale Cybersecurity Incidents and Crises—commonly referred to as the Cyber Blueprint. It sets out a non-binding yet structured framework to enhance preparedness, response, and recovery from large-scale cyber incidents that could impact the Union as a whole.

The Cyber Blueprint describes clearly who does what in an EU cyber crisis, explains what constitutes a cyber crisis, outlines the criteria for triggering a Union-level response, and clarifies the roles and interactions among Union actors throughout the crisis management lifecycle. It integrates mechanisms such as the Cybersecurity Emergency Mechanism and the EU Cybersecurity Reserve to strengthen collective readiness and operational coordination.

Building on the 2017 Commission Recommendation (EU) 2017/1584, this updated Blueprint incorporates lessons learned from Union-level exercises and recent cybersecurity developments. It promotes improved cooperation between civilian and military actors and fosters closer collaboration with NATO where dual-use infrastructures are concerned, while respecting the principles of inclusiveness, reciprocity and transparency.

By identifying key actions and responsibilities for stakeholders, the Cyber Blueprint seeks to improve the effectiveness, resilience, and coordination of the EU’s cyber crisis response, while acknowledging the evolving threat landscape and the need for shared situational awareness.