Operational Arrangements between the European Commission and Romania

                                                          Qualitative         Quantitative indicators          Indicative timeline
      Related Measure                                                                                                                                      Further
                           Milestone/                     indicators              (for targets)                  for completion        Responsibility
Num     (Reform or                          Name                                                                                                         specification
                            Target                           (for                                                                    for reporting and                             Verification mechanism
        Investment)                                                                                                                                         (where
                                                          milestones)                                                                 implementation
                                                                         Unit of                                                                          necessary)
                                                                                        Baseline        Goal   Quarter      Year
                                                                         measure
                                                                                                                                                                         minimum the following documentary
                                                                                                                                                                         evidence shall be submitted for each

village selected:

a) certificates of completion issued in accordance with the national legislation. b) Documentary proof that the minimum speed shall be at least 100 Mbps upgradeable and the networks shall be FTTB/H and/or 5G

179   Investment 12.       Target       Entities with                   Number      0              101         Q3          2025      National                            Summary document duly justifying how
      Ensuring                          secured IT&C                                                                                 Cyberint- SRI                       the target (including all the constitutive
      cybersecurity                     infrastructures                                                                              Centre                              elements) was satisfactorily fulfilled. This
      protection for                                                                                                                                                     document shall include as an annex the
      both public and                                                                                                                                                    following documentary evidence:
      private ITC
      infrastructures                                                                                                                                                    a) a list of the entities whose IT&C
      with critical                                                                                                                                                      infrastructures have been secured under
      value for national                                                                                                                                                 this investment;
      security, using
      smart                                                                                                                                                              b) a list of certificates of completion for
      technologies                                                                                                                                                       each of the entities, including official

references of certificates completion, issued in accordance with the national legislation c) final report provided by an external company in the field of cyber security audit and endorsed by the competent authority, including justification that the technical specifications of the projects are aligned with the description of the target and of the description of the investment in the CID.

On the basis of a sample that may be selected by the Commission, at a minimum the following documentary

52