(1) GCHQ is designated as the SPOC on the security of network and information systems for the United Kingdom.

(2) The SPOC may liaise with the relevant authorities in any Member State of the EU, the Cooperation Group and the CSIRTs network if it considers it appropriate.

(2A) The SPOC must -

(a) consult and co-operate, as it considers appropriate, with relevant law enforcement authorities;

(b) co-operate with the NIS enforcement authorities to enable the enforcement authorities to fulfil their obligations under these Regulations.

(3) The SPOC may, if it considers it appropriate to do so submit reports to -

(a) the Cooperation Group based on the incident reports it received under regulation 11(9) and 12(15), including the number of notifications and the nature of notified incidents; and

(b) the Commission identifying the number of operators of essential services for each subsector listed in Schedule 2.

(4) [deleted]