EE-ISAC’s Post

Last week European Union Agency for Cybersecurity (ENISA) brought together 2 important cyber communities: the EU Cybersecurity Policy and EU Cybersecurity Certification experts. There was a strong focus on future EU cyber policy development and regulations such as NIS2 Directive, Cybersecurity Certifications (EUCS, EUCC, EU5G), and the EU Cyber Resilience Act (#CRA). Compliments to #ENISA for a stellar agenda and organization. During 2 conferences co-legislators of the European Commission and the Belgian Presidency of the Council of the European Union 2024, discussed the opportunities and challenges of the future #CRA with key industry experts. The industry has been vocal in its concerns, and one of the main issues around the future reporting requirements and the suggested approach. With great interested I therefore read this morning an interview with ENISA's new Chief Cyber Officer Hans de Vries, explaining ENISA's views on the future implementation: https://lnkd.in/ezkFzFzi

“Its key role was also boosted by the growing scale and complexity of the cyber threats and challenges these last years. Therefore, the Council recommends that this increase in tasks should be reflected in adequate resources..” https://lnkd.in/eFWgs-zm

Cyber Solidarity Act approved by the EU to strengthen European cybersecurity. The European Commission has announced that the European Parliament and Council have reached a political agreement on the Cyber Solidarity Act. Originally proposed by the Commission in April last year, the Cyber Solidarity Act will enhance the EU’s capabilities to detect, prepare and respond to cyberattacks and threats. #CyberSolidarityAct #EUcybersecurity #EuropeanCyberShield #CybersecurityAlertSystem #CyberEmergencyMechanism #CyberIncidentReview #ManagedSecurityServices #EUcyberReserve #DigitalEuropeProgramme #CybersecurityPolicy #CyberThreats #DataAnalytics #ArtificialIntelligence #CyberResilience #EuropeanCommission To discover more, check out the subsequent link⬇ https://lnkd.in/gsKTuc2W

🔒 **Political Agreement on Cybersecurity** The co-legislators have reached an agreement on the Cyber Solidarity Regulation, proposed by the Commission in April 2023. This regulation will strengthen EU solidarity to better detect, prepare for, and respond to cyber threats and incidents. It also opens the possibility of adopting European certification systems for managed security services. Funding for cybersecurity actions will also be increased under the Digital Europe Programme for the period 2025-2027. The Cyber Solidarity legislation comprises three main actions: 1. Establishment of a European cybersecurity alert system, based on advanced tools such as artificial intelligence and advanced data analytics. 2. Creation of a cybersecurity emergency mechanism to enhance preparedness and response capacities to major incidents. 3. Establishment of a European cybersecurity incident review mechanism to assess incidents and formulate improvement recommendations. The agreement will be subject to formal approval by the European Parliament and the Council. Once adopted, the Cyber Solidarity Law will enter into force 20 days after its publication in the Official Journal. Explore the Cyber Solidarity legislation: [Link](https://lnkd.in/edrjJV7R) #Cybersecurity #CyberSolidarity #EU #Legislation #Agreement

🚀 Exciting Update in Cybersecurity Legislation! 🛡️   The European Parliament has officially adopted the text of the Cyber Resilience Act (CRA) on 12 March 2024, marking a pivotal moment in cybersecurity legislation. As the CRA heads towards completion, it remains a central topic of discussion in Brussels.   But the work isn't over yet, there are still crucial details to clarify for implementation. To tackle this, the European Cyber Security Organisation (ECSO) conducted a survey to understand industry challenges. The survey results are in, revealing key concerns, questions, and suggestions from the cyber ecosystem. This feedback is vital for shaping the final stages of the CRA, ensuring it aligns with industry needs.   Read the survey here: https://lnkd.in/dHTYxXHF   Let's keep the momentum going! Together, we're paving the way for a safer digital future. 💼💻 #EU #cybersecuritypolicy #policy #ECSOcommunity

The European Union launches its first major "cyber shield" called #CybersecurityAct", adopted by the European Parliament and aims to strengthen the security of #EU networks and information systems.  It provides for the creation of a European #cybersecurity center and a network of national cybersecurity centers.  Il also establishes a cybersecurity certification framework for ICT products and services. The aim of the shield is to protect the EU's critical infrastructures and strengthen cooperation between member states in the field of cybersecurity. The creation of this shield comes against a backdrop of increasing cyber-attacks, particularly from Russia. Via CyberVeille 🇫🇷 https://lnkd.in/eeqmJzD3

🔍 Navigating the NIS 2 Directive: A Must-Read for SMEs SMEs are the backbone of the economy, yet they often face significant challenges in adapting to evolving cybersecurity regulations. The NIS 2 Directive introduces new requirements aimed at enhancing business resilience and protecting critical digital infrastructure. At SOC4SME, we understand that compliance can be daunting for SMEs, particularly those with limited resources. That’s why our latest blog post, written by our partners from the Greek National Cyber Security Authority, breaks down the directive, explaining its key components and providing practical guidance to help SMEs navigate these new obligations effectively. 📖 Discover how the NIS 2 Directive impacts your business, why SMEs are a key focus, and the steps you can take to strengthen your cybersecurity strategy. 🔗 Read more: https://lnkd.in/d3gKnarP Karavias Underwriting Agency Sphynx Obrela Hellenic Ministry of Digital Governance cybersafe.gr #SOC4SME #CyberSecurity #NIS2Directive #SMEProtection #DigitalSecurity #Collaboration

The EU's Cyber Solidarity Act is set to revolutionize #cyber readiness and collective response capabilities. From establishing an EU-wide #cybersecurity alert system to creating a Cybersecurity Emergency Mechanism and a Cybersecurity Reserve, the act is a comprehensive effort to enhance Europe's cyber #defense mechanisms. Read more about the #CyberSolidarityAct in Solomon Klappholz's article for ITPro: https://lnkd.in/gPHqNPvy

Last week, the @European Parliament approved the Cyber Resilience Act, which set out cybersecurity requirements for products with digital elements within the EU. To map a few of the most important points: manufacturers of such products must implement certain essential cybersecurity requirements, as well as notify competent authorities and others about any potential vulnerabilities and serious cybersecurity incidents. I encourage you to read the full text ahead of the Act being formally implemented as EU law later this year ⤵️ https://lnkd.in/ec-8s3Aj #Cybersecurity #EU #CRA

At the #s4x24 conference this week - hearing a lot about the #cyberresilienceact and its implications for #sbom requirements from folks like Dina Truxius at Federal Office for Information Security (BSI). If you're in the #europeanunion, #sbom requirements are coming your way. Our latest blog post dives into this looming regulation and how European companies (and companies elsewhere with business in the EU) can get ahead of it. 🇪🇺