In April 2023, the Commission proposed a regulation laying down measures to strengthen solidarity and capacities in the EU to detect, prepare for and respond to cybersecurity threats and incidents (“the Cyber Solidarity Act”). The Act seeks to address the increasing number and intensity of cyberattacks, often targeted at critical infrastructure, by strengthening coordinated EU detection and awareness and supporting Member States’ preparedness and response capabilities.

The Act proposes a European Cyber Shield which will consist of a pan-European infrastructure of Security Operations Centres tasked with detecting, analysing and processing data on cyber threats, including sharing warnings on threats and incidents across borders and producing high-quality, actionable information and cyber threat intelligence through state-of-the-art tools such as AI. It also proposes a Cybersecurity Emergency Mechanism to support Member States in preparing for and responding to large-scale incidents including an EU Cybersecurity Reserve, and incident response services from trusted pre-contracted providers that can intervene, at the request of a Member State or EU body, in the case of a significant or large-scale incident. Finally, it proposes a Cybersecurity Incident Response Review Mechanism to review and assess significant or large-scale incidents after they have taken place.

On 7 December 2023, the lead Committee in the European Parliament for the Act (ITRE) adopted several amendments to the Commission’s proposal including an increased emphasis on the development of cybersecurity awareness and skills across the EU. The amendments will now have to be approved by the Parliament in plenary.

For more information, click here and here and here.