This study details trends about the recent and current evolution of CSIRTs and Incident Response (IR) capabilities in Europe towards 2025 at a strategic and policy level. As stressed in the 2016 Directive concerning measures for a high common level of security of network and information systems across the Union1 (NIS Directive), CSIRTs play a vital role in cyber resilience in a context of increasing dependency on digital infrastructures. They perform an important function throughout the crisis management process, from identifying security incidents, protecting organisations against attacks, disseminating information on threats and recovering from incidents.