Operational Arrangements between the European Commission and Romania

                                                        Qualitative         Quantitative indicators          Indicative timeline
      Related Measure                                                                                                                                    Further
                           Milestone/                   indicators              (for targets)                  for completion        Responsibility
Num     (Reform or                          Name                                                                                                       specification
                            Target                         (for                                                                    for reporting and                             Verification mechanism
        Investment)                                                                                                                                       (where
                                                        milestones)                                                                 implementation
                                                                       Unit of                                                                          necessary)
                                                                                      Baseline        Goal   Quarter      Year
                                                                       measure
                                                                                                                                                                       evidence shall be submitted for each
                                                                                                                                                                       entity selected:

a) a certificate of completion issued in accordance with national legislation signed by the competent authority for each entity selected, proving that the IT&C infrastructure of the selected entities had been secured and that the elements identified in the description of the target and in the description of the CID have been operationalized.

180   Investment 12.       Milestone    Cyberint       Additional                                            Q4          2025      National                            Summary document duly justifying how
      Ensuring                          national       capacities                                                                  Cyberint - SRI                      the milestone (including all the
      cybersecurity                     centres                                                                                    Centre                              constitutive elements) was satisfactorily
      protection for                    strengthened                                                                                                                   fulfilled. This document shall include as
      both public and                                                                                                                                                  an annex the following documentary
      private ITC                                                                                                                                                      evidence:
      infrastructures
      with critical                                                                                                                                                    a) a certificate of completion issued in
      value for national                                                                                                                                               accordance with the national legislation.
      security, using
      smart                                                                                                                                                            b) a final report provided by an external
      technologies                                                                                                                                                     company in the field of cyber security

audit, including justification that the technical specifications of the Cyberint national centre are aligned with the description of the target and of the description of the investment in the CID. c) a certificate of completion of the national programme for the economic operators and competent authorities for cyber and hybrid crisis situations, including the list of the exercises operationalised and crisis management plans developed.

181   Investment 13.       Target       Reception                     Number      0              65          Q1          2026      STS                                 Summary document duly justifying how
                                        sites                                                                                                                          the target (including all the constitutive

53