regard the EU emphasises the importance of all stakeholders’ involvement in the governance
of the internet.
The Commission has also put forward a proposal87 to modernise EU export controls,
including the introduction of controls on the export on critical cyber-surveillance technologies
that could cause violations of human rights or be misused against the EU's own security and
will step up dialogues with third countries to promote global convergence and responsible
behaviour in this area.
4.2
Cybersecurity capacity building
Global cyber stability relies on the local and national ability of all countries to prevent and
react to cyber incidents and investigate and prosecute cybercrime cases. Supporting efforts to
build national resilience in third countries will increase the level of cybersecurity globally,
with positive consequences for the EU. Countering fast-evolving cyber threats would suggest
a need for training, policy and legislation development efforts, as well as efficiently
functioning Computer Emergency Response Teams and cybercrime units in all countries
worldwide.
Since 2013, the EU has been leading on international cybersecurity capacity building and
systematically linking these efforts with its development cooperation. The EU will continue to
promote a rights-based capacity building model, in line with the Digital4Development
approach.88 The priorities for capacity-building will be the EU’s neighborhood and
developing countries experiencing fast growing connectivity and rapid development of
threats. EU efforts will be complementary to the EU's development agenda in light of the
2030 Agenda for Sustainable Development and overall efforts for institutional capacity
building.
In order to improve the EU’s ability to mobilise its collective expertise to support this
capacity-building, a dedicated EU Cyber Capacity Building Network should be set up,
bringing together the EEAS, Member States’ cyber authorities, EU agencies, Commission
services, academia and civil society. EU Cyber Capacity Building guidelines will be
developed to help offer better political guidance and prioritisation of EU efforts in assisting
the third countries.
The EU will also work together with other donors in this field to avoid duplication of effort
and facilitate more targeted capacity building in different regions.
4.3
EU-NATO cooperation
Building on the substantial progress already achieved, the EU will deepen EU and NATO
cooperation on cybersecurity, hybrid threats and defence, as foreseen in the Joint Declaration
of 8 July 2016.89 Priorities include fostering interoperability through coherent cyber defence
requirements and standards, strengthening cooperation on training and exercises, harmonising
training requirements.
The EU and NATO will also foster cyber defence research and innovation cooperation, and
build on the current technical arrangement on cybersecurity information sharing between their
respective cybersecurity bodies90. Recent joint efforts on countering hybrid threats, in
87
88
89
90
COM(2016) 616.
SWD(2017) 157.
http://www.consilium.europa.eu/en/press/press-releases/2016/07/08-eu-nato-joint-declaration/.
CERT-EU and NATO Computer Incident Response Capability (NCIRC).
19
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents