intellectual property secure and enables protecting fundamental rights such as freedom of
expression and the protection of personal data, and ensures safe online commerce.48
As the EU civilian and defence cybersecurity markets share common challenges49 and dualuse technology that call for close collaboration in critical areas, a second phase of the network
and its Centre could be further developed with a cyber defence dimension, in full respect of
the Treaty provisions related to the Common Security and Defence Policy. As well as its
technological focus, the defence dimension could contribute to the cooperation between
Member States in the area of cyber defence, including sharing of information, situational
awareness, building expertise and coordinated reactions, and supporting Member States'
development of common capabilities. It could also act as a platform, enabling Member States
to identify the priorities for the EU's cyber defence, investigating common solutions,
contributing to the development of common strategies, facilitating joint cyber defence
training, exercises and testing at European level, and supporting work on cyber defence
taxonomies and standards, with the Centre having a supporting and advisory role. To pursue
the above activities, the Centre would need to work closely and in full complementarity with
the European Defence Agency in the area of cyber defence, as well as with ENISA in the area
of cyber resilience. This defence dimension would take into account the process launched by
the Reflection paper on the future of European Defence.
The high level of resilience required in cyber defence calls for specific targeting of research
and technology efforts. The cyber defence projects or technologies developed by undertakings
could benefit from European Defence Fund financing when it comes to both the research and
development phase.50 Specific areas such as encryption systems based on quantum
technologies, cyber situational awareness, biometric access control systems, Advanced
Persistent Threats detection, or data mining could be particularly relevant in this context. The
High Representative, the European Defence Agency and the Commission will support
Member States in identifying areas where common cybersecurity projects could be considered
for financing by the European Defence Fund.
2.6
Building a strong EU cyber skills base
There is a strong education dimension to cyber security. Effective cybersecurity relies heavily
on the skills of the people concerned. But the cybersecurity skills gap for professionals
working in the private sector in Europe is predicted to be 350,000 by 2022.51 Cybersecurity
education should be developed at all levels, starting from regular training of a cyber
workforce, additional cybersecurity training for all ICT specialists, and new specific
cybersecurity curricula. Strong academic competence centres should be established to meet
the demands for accelerated education and training, which could draw on guidance from a
European Cybersecurity Research and Competence Centre and ENISA. The goal should be
that it becomes natural to design ICT products and systems which incorporate security
principles from the very beginning. Cybersecurity education should not be limited to IT
professionals, but should be mainstreamed in curricula for other areas, such as engineering,
business management or law, as well as for sector-specific education tracks. Finally, teachers
48
49
50
51
Cybersecurity in the European Digital Single Market, High level group of Scientific Advisors, March 2017.
"Study on synergies between the civilian and the defence cybersecurity markets"(Optimity; SMART 20140059).
Already now the European Defence Industry Development Programme will give priority to cyber-defence
projects and cyber defence will be one of the themes of the call for proposals that will be launched in 2018.
Global Information Security Workforce Study 2017. The global shortfall is 1.8 million.
10
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents