Currently, ENISA, the European Cybercrime Training and Education Group (ECTEG), in
cooperation with the European Cybercrime Centre at Europol and the European Police
College (CEPOL) all play an important role in providing capacity-building support –
including on cyber forensics – by developing manuals, and organising training and
cybersecurity exercises.
At the same time, cyberspace is a rapidly developing domain where dual-use capabilities play
an essential role. It is therefore necessary to develop civil-military cooperation and synergies
in training and exercises to increase the resilience and incident response capabilities of the
EU.
To respond to this need, and as a follow-up to the adoption of the NIS Directive and the EU
Cyber Defence Policy Framework17, the Commission services will cooperate with Member
States, the European External Action Service (EEAS), ENISA and other relevant EU bodies18
to establish a cybersecurity education, exercise and training platform that will promote
synergies between civilian and defence training.
The Commission will:
-
work in close cooperation with Member States, ENISA, EEAS and other relevant EU
bodies to establish a cybersecurity training platform.
2.3. Addressing inter-sectoral interdependencies and key public network infrastructure
resilience
An important factor in assessing the risk and impact of a large-scale cyber incident is the
degree of cross-border and cross-sectoral interdependencies. A severe cyber incident in one
sector or in one Member State may directly or indirectly have an effect on – or propagate to –
other sectors, or to other Member States.
Cross-border and cross-sector cooperation facilitates the exchange of information and
expertise and thus increased preparedness and resilience. The Commission has been
supporting work in various sectors to better understand interdependencies through the
implementation of the European Programme for Critical Infrastructure Protection19.
At the same time, a necessary pre-requisite for addressing cross-sectoral risks is the ability of
each individual sector to identify, prepare for and respond to cyber incidents. The
Commission will assess the risk resulting from cyber incidents in highly interdependent
sectors within and across national borders, in particular on the sectors covered by the NIS
Directive, also taking into account developments at the international level20. Following this
assessment, the Commission will consider if there is a need for further specific rules and/or
guidance on cyber risk-preparedness for such critical sectors.
17
Adopted by the Foreign Affairs Council of the European Union on 18 November 2014, Doc. 15585/14.
Such as the European Security and Defence College, EC3, CEPOL and the European Defence Agency.
19
SWD(2013) 318.
20
E.g. cyber security roadmap adopted by the European Aviation Safety Agency, cybersecurity roadmap, work of International Civil
Aviation Organisation, International Maritime Organisation.
18
6
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents