Debate: Recent cyberattacks on EU institutions and on sensitive national public and private institutions – The EU’s cybersecurity strategy for the Digital Decade
Date: WEDNESDAY, 9 JUNE 2021
Speaker: Ana Paula Zacarias
Language: EN

We must increase our resilience and improve our cybersecurity, which is of utmost importance for ensuring proper functioning of our society, of our democracies, of our economies. This was also called for by the European Council in June 2019 and reiterated this February. I therefore welcome the new EU cybersecurity strategy for the Digital Decade, which the Commission and the High Representative presented at the end of last year. It shows ambition, with a comprehensive set of measures such as legislative proposals, investment and policy instruments, and it has a comprehensive view. The Commission and the High Representative will present a report on its implementation now on 23 June.  The recent Council conclusions on this cybersecurity strategy highlight a number of actions for the coming years related to digital and cybersecurity skills in the workforce, as well as the availability of financial instruments, in particular to support SMEs. We are also seeking to build on the EU’s cyberdiplomacy efforts and increase the effectiveness of the EU cyberdiplomacy toolbox.  While much work has already been done, or is under way, much more still needs to be done. The new directive on measures for a high common level of cybersecurity, the so-called NIS2 Directive, will be an important cornerstone of our cybersecurity and, as co-legislators, I hope we can ensure a swift adoption. In the Council, we hope to be in a position to start negotiations by the end of this year.  I also look forward to the future legislative proposals on common rules on information security and common binding rules on cybersecurity for all EU institutions, bodies and agencies, which the Commission has announced and which are expected in October this year. In due time, the Commission will also present its concept on the Joint Cyber Unit, a platform that would help to better protect the EU from the most serious cyberattacks. We also need to enhance cooperation and information-sharing amongst the various cybercommunities within the EU and explore how we can better link the various existing initiatives, structures and procedures.  The EU institutions are taking steps to reinforce their security culture and resilience, including by improving their assessment of security threats to the institutions, and promoting security awareness amongst the EU staff. The EU institutions, bodies and agencies are also actively working on securing their communication and information systems.  Cybersecurity is undoubtedly one of the biggest challenges for the years to come. It will require adapted, coordinated and innovative responses in all Member States and in all of our institutions. The number, magnitude, sophistication, frequency and impact of cybersecurity incidents are increasing every day and generating financial losses, undermining our citizens’ confidence and causing major damage in the Union economy and society. Our cybersecurity preparedness and resilience are therefore now more essential than ever. We need to work on this together. Thank you very much for your attention.