These Regulations establish security measures that providers of public electronic communications networks or public electronic communications services must take to fulfil their duties. These measures:
require providers of public electronic communications networks or services to take specific measures that are appropriate and proportionate to identify and reduce the risk of security compromises occurring and prepare for security compromises; and
require public telecommunications providers to take specific measures in response to security compromises.
