CER law

What the CER law asks of critical entities

A European directive, a Belgian law of 19 December 2025, and a clear expectation: be prepared.

A legal obligation for critical entities

The European Critical Entities Resilience (CER) directive was transposed into Belgian law on 19 December 2025. It requires critical entities, and their subcontractors, to prepare for major disruption.

Not complying is no longer an option. But compliance on paper is not the same as being ready. The aim is a system that works on the day: people who know their role, decisions that can be taken under pressure, and a record showing you took reasonable measures.

How Kairys-EU approaches it

We treat the law as a floor. Our approach covers the whole chain and rests on continuous improvement, not a single compliance exercise: a maturity assessment, risk analysis, crisis and continuity plans, training, and exercises that test them.

Everything is calibrated to your size, your pace and your means, so a smaller subcontractor and a large operator each get a proportionate answer.

Read the Belgian law on centredecrise.be (in French).

The CER law, in short answers

What is the CER directive?

The Critical Entities Resilience directive is a European framework for the resilience of critical entities. Belgium transposed it by the law of 19 December 2025.

Does it apply to subcontractors?

Yes. The preparation it requires applies to critical entities and to their subcontractors.

Is compliance enough?

Compliance is the minimum. We aim for genuine preparation: a system that protects your staff and your business, improved continuously.

Where can I read the law?

The Belgian text is published on centredecrise.be. We link to it on this page.

Not sure where you stand under the CER law?

Talk it through in a first 30-minute conversation, with no commitment.

Contact Kairys-EU