(a)

to exchange information about the CSIRTs’ capabilities;

(b)

to facilitate the sharing, transfer and exchange of technology and relevant measures, policies, tools, processes, best practices and frameworks among the CSIRTs;

(c)

to exchange relevant information about incidents, near misses, cyber threats, risks and vulnerabilities;

(d)

to exchange information with regard to cybersecurity publications and recommendations;

(e)

to ensure interoperability with regard to information-sharing specifications and protocols;

(f)

at the request of a member of the CSIRTs network potentially affected by an incident, to exchange and discuss information in relation to that incident and associated cyber threats, risks and vulnerabilities;

(g)

at the request of a member of the CSIRTs network, to discuss and, where possible, implement a coordinated response to an incident that has been identified within the jurisdiction of that Member State;

(h)

to provide Member States with assistance in addressing cross-border incidents pursuant to this Directive;

(i)

to cooperate, exchange best practices and provide assistance to the CSIRTs designated as coordinators pursuant to Article 12(1) with regard to the management of the coordinated disclosure of vulnerabilities which could have a significant impact on entities in more than one Member State;

(j)

to discuss and identify further forms of operational cooperation, including in relation to:

(k)

to inform the Cooperation Group of its activities and of the further forms of operational cooperation discussed pursuant to point (j), and, where necessary, request guidance in that regard;

(l)

to take stock of cybersecurity exercises, including those organised by ENISA;

(m)

at the request of an individual CSIRT, to discuss the capabilities and preparedness of that CSIRT;

(n)

to cooperate and exchange information with regional and Union-level Security Operations Centres (SOCs) in order to improve common situational awareness on incidents and cyber threats across the Union;

(o)

where relevant, to discuss the peer-review reports referred to in Article 19(9);

(p)

to provide guidelines in order to facilitate the convergence of operational practices with regard to the application of the provisions of this Article concerning operational cooperation.