Europaparlaments- og rådsforordning (EU) .../... om fastsettelse av tiltak for å styrke solidariteten og kapasiteten i Unionen til å oppdage, forberede seg på og reagere på trusler og hendelser innen cybersikkerhet og endring av forordning (EU) 2021/694 (Cybersolidaritetsforordningen)
Cybersolidaritetsforordningen
Rådsbehandling 2.12.2024 (enighet med Europaparlamentet; endelig vedtak) med pressemelding. Omtale publisert i Stortingets EU/EØS-nytt 5.12.2024
Tidligere
- Statusrapport publisert av Europaparlamentets utredningsavdeling 27.11.2023
- Foreløpig holdning (forhandlingsmandat) vedtatt av Rådet 20.12.2023
- Kompromiss fremforhandlet av representanter fra Europaparlamentet og Rådet 6.3.2024
- Europaparlamentets plenumsbehandling 24.4.2024
Bakgrunn
BAKGRUNN (fra Kommisjonens pressemelding 18.4.2023)
Cyber: towards stronger EU capabilities for effective operational cooperation, solidarity and resilience
EU Cyber Solidarity Act
The EU Cyber Solidarity Act will strengthen solidarity at Union level to better detect, prepare for and respond to significant or large-scale cybersecurity incidents, by creating a European Cybersecurity Shield and a comprehensive Cyber Emergency Mechanism.
To detect major cyber threats quickly and effectively, the Commission proposes the establishment of a European Cyber Shield, which is a pan-European infrastructure of composed of national and cross-border Security Operations Centres (SOCs) across the EU. These are entities tasked with detecting and acting on cyber threats. They will use state-of-the-art technology, such as artificial intelligence (AI) and advanced data analytics, to detect and share timely warnings on cyber threats and incidents across borders. In turn, authorities and relevant entities will be able to respond more efficiently and effectively to major incidents.
These centres could be operational by early 2024. As a preparatory phase of the European Cyber Shield, in April 2023 the Commission has selected, under the Digital Europe Programme, three consortia of cross-border Security Operations Centres (SOC), bringing together public bodies from 17 Member States and Iceland.
The EU Cyber Solidarity Act also includes the creation of a Cyber Emergency Mechanism to increase preparedness and enhance incident response capabilities in the EU. It will support:
Preparedness actions, including testing entities in highly critical sectors (healthcare, transport, energy, etc.) for potential vulnerabilities, based on common risk scenarios and methodologies.
Creating a new EU Cybersecurity Reserve consisting of incident response services from trusted providers pre-contracted and therefore ready to intervene, at the request of a Member State or Union Institutions, bodies and agencies, in case of a significant or large-scale cybersecurity incident.
Providing financial support for mutual assistance, where a Member State could offer support to another Member State.
Moreover, the proposed Regulation establishes the Cybersecurity Incident Review Mechanism to enhance Union resilience by reviewing and assessing significant or large-scale cybersecurity incidents after they have taken place, drawing lessons learned and where appropriate, issuing recommendations to improve Union's cyber posture.
The total budget for all actions under the EU Cyber Solidarity Act is of EUR 1.1 billion, of which about 2/3 will be financed by the EU through the Digital Europe Programme.
Se hele pressemeldingen her.