Currently, ENISA, the European Cybercrime Training and Education Group (ECTEG), in cooperation with the European Cybercrime Centre at Europol and the European Police College (CEPOL) all play an important role in providing capacity-building support – including on cyber forensics – by developing manuals, and organising training and cybersecurity exercises. At the same time, cyberspace is a rapidly developing domain where dual-use capabilities play an essential role. It is therefore necessary to develop civil-military cooperation and synergies in training and exercises to increase the resilience and incident response capabilities of the EU. To respond to this need, and as a follow-up to the adoption of the NIS Directive and the EU Cyber Defence Policy Framework17, the Commission services will cooperate with Member States, the European External Action Service (EEAS), ENISA and other relevant EU bodies18 to establish a cybersecurity education, exercise and training platform that will promote synergies between civilian and defence training. The Commission will: - work in close cooperation with Member States, ENISA, EEAS and other relevant EU bodies to establish a cybersecurity training platform. 2.3. Addressing inter-sectoral interdependencies and key public network infrastructure resilience An important factor in assessing the risk and impact of a large-scale cyber incident is the degree of cross-border and cross-sectoral interdependencies. A severe cyber incident in one sector or in one Member State may directly or indirectly have an effect on – or propagate to – other sectors, or to other Member States. Cross-border and cross-sector cooperation facilitates the exchange of information and expertise and thus increased preparedness and resilience. The Commission has been supporting work in various sectors to better understand interdependencies through the implementation of the European Programme for Critical Infrastructure Protection19. At the same time, a necessary pre-requisite for addressing cross-sectoral risks is the ability of each individual sector to identify, prepare for and respond to cyber incidents. The Commission will assess the risk resulting from cyber incidents in highly interdependent sectors within and across national borders, in particular on the sectors covered by the NIS Directive, also taking into account developments at the international level20. Following this assessment, the Commission will consider if there is a need for further specific rules and/or guidance on cyber risk-preparedness for such critical sectors. 17 Adopted by the Foreign Affairs Council of the European Union on 18 November 2014, Doc. 15585/14. Such as the European Security and Defence College, EC3, CEPOL and the European Defence Agency. 19 SWD(2013) 318. 20 E.g. cyber security roadmap adopted by the European Aviation Safety Agency, cybersecurity roadmap, work of International Civil Aviation Organisation, International Maritime Organisation. 18 6

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents