New measures to strengthen cybersecurity resilience and capabilities

We spend a lot of our time online. This shift to the digital world brings threats as well as opportunities. This includes cyber and hybrid attacks on essential services and democratic institutions, which Europe faces on a daily basis. The Commission has proposed new cybersecurity measures to further strengthen the EU’s resilience and capabilities in the face of these growing threats.

The Commission has proposed to revise the 2019 Cybersecurity Act, which sets the framework for EU-wide cybersecurity certification of digital products, services and processes. The revision aims to

• enhance the security of the EU’s information and communication technologies  supply chains, by reducing the risks from third-country suppliers that raise cybersecurity concerns
• ensure that digital products and services used by EU citizens are tested for security in a more efficient way, by clarifying rules and simplifying procedures under the European Cybersecurity Certification Framework

Beyond revising the cybersecurity act, the measures include additional steps to

• make it easier for companies to follow cybersecurity rules by simplifying jurisdictional rules and streamlining data collection on ransomware attacks
• reinforce the EU Agency for Cybersecurity (ENISA) so it can better support EU countries in understanding, preparing and responding to common threats

These proposals will now be discussed by the European Parliament and the Council of the EU. Once approved, they can be applied across the EU.

For more information

Press release - Commission strengthens EU cybersecurity resilience and capabilities

EU cybersecurity

Revised Cybersecurity Act