Collaborative efforts can be facilitated by harmonising requirements for next-generation cyber
defence capabilities, which might possibly lead to joint development and procurement
initiatives and integrated life-cycle support. For this reason, EDA and EU Military Staff will
develop recommendations on a set of EU cyber defence interoperability requirements.
Those requirements must be considered throughout all planning horizons to guarantee all
aspects of standardisation as the critical enabler for interoperability. Requirements for testing,
evaluation and certification are other critical enablers.
Harmonised standards for cybersecurity will be developed for hardware and software products
and components in the context of the proposed Cyber Resilience Act34. Such standards will
concern all civilian and dual-use products with digital elements, which make up a large share
of the products used in defence sector. Where possible, the Commission will encourage
coherence with defence-related cybersecurity standards for digital products. As set out in the
Action plan on Synergies between civilian, defence and space industries35 (the ‘Synergies
Action Plan’), the Commission in close cooperation with key stakeholders will present a plan
to promote the use of existing hybrid civil/defence standards and the development of new ones
. Cooperation should further develop between all relevant stakeholders, including European
standardisation organisations, North Atlantic Treaty Organization (NATO) and other partners,
making best use to that end of the European Defence Standardisation Committee. In a similar
vein, when military standardisation bodies develop new cybersecurity-related standards for
products with digital elements for defence use, harmonised standards developed under the
Cyber Resilience Act should be used as a baseline36.
Cyber defence actions
Support Member States in the development of non-legally binding recommendations for
the defence community, inspired by NIS2, to contribute to an increased overall cyber
defence maturity at national level.
Develop recommendations on EU cyber defence interoperability requirements.
Enhance cooperation with all relevant actors on defence-related standards in the framework
of the European Defence Standardisation Committee.
Civilian support actions
Develop risk scenarios for critical infrastructure of importance to military communication
and mobility to target preparedness actions including through penetration testing.
Foster cooperation between civilian and military standardisation bodies for the
development of harmonised standards for dual use products.
3. Invest in cyber defence capabilities
34
COM/2022/454 final
COM(2021) 70 final
36
Standardisation work is currently ongoing in relation to cybersecurity requirements concerning radio equipment,
on the basis of Delegated Regulation (EU) 2022/30. If the Commission repeals or amends this delegated regulation
with the consequence that it ceases to apply to certain products subject to the Cyber Resilience Act, the
Commission and the European Standardisation Organisations should take into account the standardisation work
carried out in the context of Commission Implementing Decision C(2022)5637 on the standardisation request for
the above-mentioned delegated regulation in the preparation and development of harmonised standards to
facilitate the implementation of the Cyber Resilience Act.
35
11
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents