Debate: A high common level of cybersecurity across the Union
Date: THURSDAY, 10 NOVEMBER 2022
Speaker: Margrethe Vestager
Language: EN

The politically agreed text shows the determination of the European Parliament, of Member States, to deliver an ambitious and future—proof European framework for cybersecurity, where Europe can lead by example. The implementation of the directive will be key in effectively addressing the challenges brought by rapid digital developments and the constantly developing number of severe cyberattacks. The agreed directive will reinforce the applicable security and incident—reporting obligations for companies while expanding the scope. I think that is really important that new sectors become part of it and also that new types of services ensure a coherent and harmonised cross sectoral approach to cybersecurity. So we will have the streamlined legal obligations for essential, important entities in our single market. I think also in the run—up to the celebration of the 30 years of the single market, this marks a milestone to make sure that this single market that increasingly becomes a digital single market has the necessary cybersecurity provisions. And NIS2 introduces the possibilities of a coordinated EU supply chain risk assessment based on the very positive experiences that we have had with the 5G toolbox. And here I want to call on your support, because we still need to encourage the few Member States who have not yet adopted necessary restrictions on high—risk suppliers, because they ought to do so without delay. It’s not sufficient to pass legislation. It is needed to put legislation into effect and is a matter of urgency. And following that, also let me underline the importance of this directive in view of the latest geopolitical developments. We have seen recent attacks on critical infrastructure in the Union. The legal transposition of the directive –well, that will take its agreed time. But the Commission believes that we should front—load, as much as possible, the benefits already now on a voluntary basis, because people who attack us, they do not wait for transposition of a directive, if they even understand or appreciate that legal wording. So we need to see action as fast as possible. And this is what we have proposed for now a draft Council recommendation on the security of critical infrastructure. Of course, we do hope that Member States share our sense of urgency. As I see it, the European Parliament and the Commission have a common approach to this and a sense of urgency to make sure that we are well protected. Because the thing is that there is no European defence without cyber defence. It doesn’t exist. We have seen it with the Russian attack on the Viasat satellite. Here you can deeply effect military forces by attacking civilian infrastructure. The cyber defence policy, therefore, will put forward new instruments reinforcing our collective ability to address cyber threats from early detection of possible attacks to deterring future threats. Because I completely agree with the rapporteur, this agreement on the NIS2 Directive is a major achievement, but we need to push forward as fast as possible on next urgent matters. So we will propose to increase cooperation on three main fronts: cooperation between Member States’ military, cooperation between civil and military, and cooperation between the private and the public sector. We cannot protect ourselves without cooperating on it. And we will also propose to use EU instruments and policies with dual use, such as our investment in cyber research and innovation, or on skills that can benefit military actors as well. The Commission welcomes warmly the vote today on the agreed NIS2 text. It maintains the overall ambition of the original proposal and we are convinced that this text will enable us to raise the growing and pressing cyber—security challenge towards our economies, towards our societies, and make it obvious that protecting is cheap: facing the risk, paying for the attacks, these costs would be astronomical.