EC recommendation on cybersecurity in the energy sector