the latest security, data protection and privacy by design and by default standards and rules
and form part of the European Industrial Alliance for Data and Cloud63.
The Commission will also, in liaison with Member States and industry, accelerate the
uptake of key internet standards including IPv664 and well-established internet security
standards and good practices for DNS, routing, and email security65, not excluding
regulatory measures like a European sunset clause for IPv4 to steer the market if there is
insufficient progress towards their adoption. The EU should promote (as for example under
the EU-Africa Strategy66) the implementation of these standards in partner countries as a way
to support the development of the global and open Internet and to counteract closed and
control-based models of the Internet. Finally, the Commission will consider the need for a
mechanism for more systematic monitoring and gathering of aggregated data on Internet
traffic and for advising on potential disruptions67.
1.7
A reinforced presence on the technology supply chain
With its planned financial support for cyber-secure digital transformation over the 2021-2027
Multiannual Financial Framework, the EU has the unique opportunity to pool its assets to
propel its Industry Strategy68 and leadership in digital technologies and cybersecurity across
the digital supply chain (including data and cloud, next generation processor technologies,
ultra-secure connectivity and 6G networks), in line with its values and priorities. Public
sector intervention should rely on the tools provided by the EU public procurement
regulatory framework and Important Projects of Common European Interest. Beyond this, it
can unlock private investments through public-private partnerships (including building on the
experience of the contractual public private partnership on cybersecurity and its
implementation through the European Cyber Security Organisation), venture capital in
support of SMEs or industrial alliances and strategies on technology capacities.
Special focus will be put also on the Technical Support Instrument 69 and best use of the latest
cybersecurity tools by SMEs - especially those not falling under the scope of the revised NIS
Directive - including through dedicated activities under the Digital Innovation Hubs in the
Digital Europe Programme. The objective is to trigger a similar amount of investments by the
Member States, to be matched by industry under a partnership co-governed with Member
States in the proposed Cybersecurity Industrial, Technology and Research Competence
Centre and Network of Coordination Centres (CCCN). The CCCN should play a key role,
with input from industry and academic communities, in developing the EU’s technological
sovereignty in cybersecurity, building capacity to secure sensitive infrastructures such as 5G,
and reduce dependence on other parts of the globe for the most crucial technologies.
63
Joint Declaration: Building the next generation cloud for businesses and the public sector in the EU;
https://ec.europa.eu/digital-single-market/en/news/towards-next-generation-cloud-europe
64
IPv6 deployment is more advanced now with the severe depletion of supply and rise in cost of IPv4 addresses.
However, IPv6 deployment is uneven across the EU.
65
Such standards include DNSSEC, HTTPS, DNS over HTTPS (DoH), DNS over TLS (DoT), SPF, DKIM,
DMARC, STARTTLS, DANE and routing norms and good practices e.g. Mutually Agreed Norms for Routing
Security (MANRS).
66
Joint Communication Towards a comprehensive strategy with Africa, 9.3.2020 JOIN(2020) 4 final.
67
Such an ‘Internet Observatory’ could be within scope of activities of the European Cybersecurity Industrial,
Technology and Research Competence Centre; Proposal for a Regulation establishing the European
Cybersecurity Industrial, Technology and Research Competence Centre and the Network of National
Coordination Centres, COM(2018) 630 final.
68
Communication on a New Industrial Strategy for Europe, COM/2020/102 final.
69
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=COM:2020:0409:FIN .
11