Regulatory obligations, civil and criminal liabilities of Computer Security Incident Response Teams regarding incident management, notification to authorities, personal data protection, and operational continuity. Includes aspects of liability, duty of care, NIS2 compliance, GDPR, and national cyber resilience frameworks for public entities and essential operators.