Eurelectric welcomes the ongoing efforts to enhance cybersecurity and appreciates this opportunity to respond to the delegated regulation of the European Commission.Implementation timescales: Overall, we find the implementation horizon too long. In its current version, the NCCS could take between 7 to 10 years until it is fully implemented, leaving the European electricity grid more vulnerable to cyber-attacks in the meantime. For instance, in the scenario where all deadlines are met, a critical-impact entity will only be obliged to demonstrate compliance with the common electricity cybersecurity framework 10 years after the entry into force of the NCCS.We welcome Article 33 creating a mapping matrix to provide the information of which controls in European and international standards would be equivalent to the controls proposed in Article 27. However, It is unnecessary to wait 36 months for the results and it should be changes to 6 months. In addition, we propose in Article 47 to also create a provisional mapping matrix for the provisional cybersecurity controls, instead of only a list of European and international standards to provide guidance.The timeline incoherence between two interdependent requirements should be rectified. The first requirement is for national entities to create a list of national legislation for cybersecurity purposes. The second requirement is for ENTSO-E and EU DSO to develop a provisional list of European and international standards and controls needed for national legislation. The second requirement has a shorter deadline, even though it is secondary to the first requirement.