The Commission issues guidelines to strengthen the resilience of critical infrastructure

On 10 July 2026, the European Commission adopted a Communication providing Member States and their critical infrastructure operators with non-binding guidance on technical, security and organisational measures to strengthen the resilience of critical infrastructure against natural and man-made risks. 

The Communication offers practical guidance on addressing all risks that could lead to disruptive incidents, including cross-sectoral or cross-border risks, accidents, natural disasters, public health emergencies, drone attacks, hybrid threats and other adversarial threats. It includes recommendations for preventing failures or disruptions to essential services, physically protecting critical infrastructure, mitigating and recovering from disruptive incidents, and improving security management and staff awareness of resilience. 

These guidelines aim to help EU countries implement the Directive on the Resilience of Critical Infrastructure and strengthen their resilience so that services essential to social well-being and economic activity are not disrupted by external threats. The Directive provides a framework for EU countries to develop national strategies, carry out regular risk assessments and identify critical entities, which, in turn, must adopt technical, security and organisational measures to improve their resilience. 

This guide was also identified as a key action under the EU Action Plan on Drone Security and Counter-Drone Measures, and includes specific considerations for countering drone-related threats. As highlighted in the European Internal Security Strategy, ProtectEU, the swift and correct transposition and implementation of the Directive by all EU countries are essential to reducing vulnerabilities and strengthening resilience. 

The Commission stated that it will continue to support EU countries in strengthening the protection of critical infrastructure and the resilience of critical entities across the EU. The guidelines were drawn up following extensive consultations with multiple stakeholders, with input from Member States and the European sectoral associations covered by the Directive, and in close collaboration with international partner organisations.

More information: European Commission.