Analytics, Cybernetics, EU – Baltic States, Internet

Initial efforts for the new action plan (adopted on 5.07.2016) date back to the 2015 Digital Single Market strategy, the 2013 EU Cybersecurity strategy and the forthcoming Network and Information Security (NIS) Directive. It builds on the recent Communications on Delivering the European Agenda on Security and Countering Hybrid Threats.

According to a recent survey, at least 80% of European companies have experienced at least one cybersecurity incident over the last year and the number of security incidents across all industries worldwide rose by 38% in 2015. This damages European companies, whether they are big or small, and threats to undermine trust in the digital economy. As part of its Digital Single Market strategy the Commission wants to reinforce cooperation across borders, and between all actors and sectors active in cybersecurity, and to help develop innovative and secure technologies, products and services throughout the EU.

Commission Vice-President for the Digital Single Market, Andrus Ansip underlined that without trust and security, generally, there could be no Digital Single Market. Europe has to be ready to tackle cyber-threats that are increasingly sophisticated and do not recognise borders.

Proposed concrete measures would strengthen Europe's resilience against such attacks and secure the capacity needed for building and expanding the EU digital economy.

Commissioner for the Digital Economy and Society, Günther H. Oettinger stressed that the EU needed high quality, affordable and interoperable cybersecurity products and services. He added that huge opportunities exist for the EU’s cybersecurity industry to compete in a fast-growing global market. Hence the Commission calls on the member states and all cybersecurity bodies to strengthen cooperation and pool their knowledge, information and expertise to increase Europe's cyber resilience.

Cybersecurity through public private partnership 

The new action plan includes the launch of the first European public private partnership on cybersecurity. The EU will invest  EUR 450 mln in this partnership, under its research and innovation programme Horizon 2020. Cybersecurity market players, represented by the European Cyber Security Organisation (ECSO), are expected to invest three times more. This partnership will also include members from national, regional and local public administrations, research centres and academia. The aim of the partnership is to foster cooperation at early stages of the research and innovation process and to build cybersecurity solutions for various sectors, such as energy, health, transport and finance; Commissioner Oettinger signed the partnership with the ECSO in Strasbourg.

The Commission also sets out different measures to tackle the fragmentation of the EU cybersecurity market. Currently an ICT company might need to undergo different certification processes to sell its products and services in several EU states. The Commission will therefore look into a possible European certification framework for ICT security products.

A myriad of innovative European SMEs have emerged in niche markets (e.g. cryptography) and in well-established markets with new business models (e.g. antivirus software), but they are often unable to scale up their operations. The Commission wants to ease access to finance for smaller businesses working in the field of cybersecurity and will explore different options under the

Initial efforts for the new action plan (adopted on 5.07.2016) date back to the 2015 Digital Single Market strategy, the 2013 EU Cybersecurity strategy and the forthcoming Network and Information Security (NIS) Directive. It builds on the recent Communications on Delivering the European Agenda on Security and Countering Hybrid Threats.

According to a recent survey, at least 80% of European companies have experienced at least one cybersecurity incident over the last year and the number of security incidents across all industries worldwide rose by 38% in 2015. This damages European companies, whether they are big or small, and threats to undermine trust in the digital economy. As part of its Digital Single Market strategy the Commission wants to reinforce cooperation across borders, and between all actors and sectors active in cybersecurity, and to help develop innovative and secure technologies, products and services throughout the EU.

Commission Vice-President for the Digital Single Market, Andrus Ansip underlined that without trust and security, generally, there could be no Digital Single Market. Europe has to be ready to tackle cyber-threats that are increasingly sophisticated and do not recognise borders.

Proposed concrete measures would strengthen Europe's resilience against such attacks and secure the capacity needed for building and expanding the EU digital economy.

Commissioner for the Digital Economy and Society, Günther H. Oettinger stressed that the EU needed high quality, affordable and interoperable cybersecurity products and services. He added that huge opportunities exist for the EU’s cybersecurity industry to compete in a fast-growing global market. Hence the Commission calls on the member states and all cybersecurity bodies to strengthen cooperation and pool their knowledge, information and expertise to increase Europe's cyber resilience.

Cybersecurity through public private partnership 

The new action plan includes the launch of the first European public private partnership on cybersecurity. The EU will invest €450 million in this partnership, under its research and innovation programme Horizon 2020. Cybersecurity market players, represented by the European Cyber Security Organisation (ECSO), are expected to invest three times more. This partnership will also include members from national, regional and local public administrations, research centres and academia. The aim of the partnership is to foster cooperation at early stages of the research and innovation process and to build cybersecurity solutions for various sectors, such as energy, health, transport and finance; Commissioner Oettinger signed the partnership with the ECSO in Strasbourg.

The Commission also sets out different measures to tackle the fragmentation of the EU cybersecurity market. Currently an ICT company might need to undergo different certification processes to sell its products and services in several EU states. The Commission will therefore look into a possible European certification framework for ICT security products.

A myriad of innovative European SMEs have emerged in niche markets (e.g. cryptography) and in well-established markets with new business models (e.g. antivirus software), but they are often unable to scale up their operations. The Commission wants to ease access to finance for smaller businesses working in the field of cybersecurity and will explore different options under the EU investment plan.

The Network and Information Security Directive, which is expected to be adopted by the European Parliament, creates a system of Computer Security Incident Response Teams across the EU in order to rapidly react to cyber threats and incidents. It also establishes “Cooperation Group” among EU states, to support and facilitate strategic cooperation as well as the exchange of information, and to develop trust and confidence.

The Commission calls on EU states to strengthen coordination and enhance cross-border cooperation in case of a major cyber-incident. Given the speed with which the cybersecurity landscape is evolving, the Commission will also bring forward its evaluation of the European Union Agency for Network and Information Security (ENISA).This evaluation will assess whether ENISA's mandate and capabilities remain adequate to achieve its mission of supporting EU Member States in boosting their own cyber resilience. The Commission also examines how to strengthen and streamline cybersecurity cooperation across different sectors of the economy, including in cybersecurity training and education.

More information in the following links: =Questions and Answers; =Cybersecurity; =Cybersecurity industry; =ENISA; =Results of the public consultation on PPP and accompanying measures

Newly adopted documents on cybersecurity: =Communication: Strengthening Europe's Cyber Resilience System and Fostering a Competitive and Innovative Cybersecurity Industry; =Commission Decision to establish a contractual public private partnership on cybersecurity (PPP); =Commission Staff working document on PPP and accompanying measures; =Commission Staff working document on assessment of cybersecurity in EU's Seventh Framework Programme for Research and Technological Development (FP7) and the Competitiveness and Innovation Framework Programme (CIP); =Commission Staff working document on Consultation Process

General reference: http://europa.eu/rapid/press-release_IP-16-2321_en.htm.