EU states agree common position to strengthen cybersecurity

EU member states’ representatives (Coreper) have reached a common position on the so-called ‘cyber solidarity act’ that is designed to strengthen the EU’s capacity to detect, prepare for and respond to cybersecurity threats and incidents. The draft regulation establishes capabilities to make Europe more resilient and reactive in front of cyber threats, while strengthening cooperation mechanisms, said the European Council. “Today’s agreement is another step to improve cyber resilience in Europe. It will certainly strengthen the EU’s and member states’ capabilities to prepare for, prevent, respond to and recover from large-scale cyber threats and attacks in a more efficient and effective manner,” said José Luis Escrivá, Spanish minister for digital transformation. The Commission proposal mainly aims to: Support detection and awareness of significant or large-scale cybersecurity threats and incidents. Bolster preparedness and protect critical entities and essential services, such as hospital and public utilities. Strengthen solidarity at EU level, concerted crisis management and response capabilities across member states. Contribute to ensuring a safe and secure digital landscape for citizens and businesses. To detect major cyber threats quickly and effectively, the draft regulation establishes a ‘European cyber shield', which is a pan-European infrastructure composed of national and cross-border security operations centres (SOCs) across the EU. These are entities in charge of sharing information and tasked with detecting and acting on cyber threats. The council said the centres will use state-of-the-art technology, such as artificial intelligence (AI) and advanced data analytics, to detect and share timely warnings on cyber threats and incidents across borders. In turn, authorities and relevant entities will be able to respond more efficiently and effectively to major incidents, it added. The draft regulation also aims to set up a cyber emergency mechanism to increase preparedness and enhance incident response capabilities in the EU. It will support: Preparedness actions, including testing entities in highly critical sectors (healthcare, transport, energy, etc) for potential vulnerabilities, based on common risk scenarios and methodologies. A new EU cybersecurity reserve consisting of incident response services from private sector trusted providers pre-contracted and therefore ready to intervene, at the request of a member state or EU institutions, bodies, and agencies, in case of a significant or large-scale cybersecurity incident. Mutual assistance in financial terms, where a member state could offer support to another member state. The proposed regulation would then establish a cybersecurity incident review mechanism to enhance EU resilience by reviewing and assessing significant or large-scale cybersecurity incidents after they have taken place, issuing recommendations to improve EU’s cyber posture. At the request of the EC or national authorities, the EU’s cybersecurity agency (Enisa) would review certain cybersecurity incidents and deliver a report with lessons learned and recommendations. The agreement on the Council’s position will allow the incoming presidency to enter negotiations with the European Parliament on the final version of the proposed legislation.

EU states agree common position to strengthen cybersecurity

Want to read this article?

Read Next

Howden’s data analysis finds insurers should be taking on more cyber risk

Asian investors urge action on nature-related risk

Belgian mutuals say Europe is ‘relegating’ climate in new legislative programme

Asian risk managers must turn focus to due diligence

Europe’s disaster risk efforts ‘significant’, says UN office

Howden’s data analysis finds insurers should be taking on more cyber risk

Asian investors urge action on nature-related risk

Belgian mutuals say Europe is ‘relegating’ climate in new legislative programme

Asian risk managers must turn focus to due diligence

Europe’s disaster risk efforts ‘significant’, says UN office

Want to read this article?

Read Next

Howden’s data analysis finds insurers should be taking on more cyber risk

Asian investors urge action on nature-related risk

Belgian mutuals say Europe is ‘relegating’ climate in new legislative programme

Asian risk managers must turn focus to due diligence

Europe’s disaster risk efforts ‘significant’, says UN office

Related Articles