cyberspace operations is a national prerogative of Member States, while relying on a wider
ecosystem, including a strong industrial base supported by EU-level capability development.
The EU cyber defence community, composed of Member States’ defence authorities and
supported by EU institutions, bodies and agencies (EUIBAs), has certain specificities in
comparison to the other cyber communities8 and follows a different governance model. The
absence of an established framework for information exchange and cooperation among EU
military Computer Emergency Response Teams (milCERTs), including in support of military
CSDP missions and operations, is problematic in view of the heightened level of cyber threats
from state and non-state actors.
Cooperation between civilian, diplomatic and law enforcement cyber communities and their
defence counterparts will bring high added value to all actors concerned. It is therefore crucial
to enable such collaboration by providing suitable and secure means for information exchange
and engage in exercises and other activities that build trust and common understanding.
Furthermore, there is currently only limited mutual operational assistance between Member
States. The further expansion of the concept of cyber rapid reaction teams across the EU should
be explored, building on the related Permanent Structured Cooperation (PESCO) project Cyber
Rapid Response Teams and Mutual Assistance in Cyber Security (CRRT)9, including in the
context of Article 42(7) Treaty on European Union (TEU)10 (‘mutual assistance clause’) and
Article 222 Treaty on the Functioning of the European Union (TFEU)11 (‘solidarity clause’).
In a similar vein, one of the lessons learned from the successful Ukrainian cyber defence in the
context of Russia’s war of aggression is the decisive role played by the private sector. It should
therefore be explored to which extent the private sector could also contribute to enhancing
cyber response.
1.1 Strengthening common situational awareness and coordination within defence
community
Given the scale of the risk associated with cyberattacks, Member States need to have the most
complete collective situational awareness at their disposal, including early detection capacity
as well as the resources to respond properly and recover in a solidary and coordinated manner.
As far as military situational awareness is concerned, there is a need to establish an EU Cyber
Defence Coordination Centre (EUCDCC) supporting enhanced situational awareness within
the defence community, including all EU military CSDP commanders. The High
Representative will present the proposal for the EUCDCC for Member States consideration,
building on the PESCO Cyber and Information Domain Coordination Centre (CIDCC)
project12. It will aim to provide a holistic analysis of cyberspace, the electromagnetic
environment, and the cognitive domain by bringing together different sources of information
to the military strategic and operational levels. Appropriate links should be established between
EUCDCC and the EU Intelligence Analysis Centre (EU INTCEN) as well as the EU Military
8
Civilian, diplomatic and law enforcement cyber communities
Cyber Rapid Response Teams and Mutual Assistance in Cyber Security
10
Treaty on European Union, Consolidated version: Official Journal C 326, 26/10/2012 P. 0001 - 0390
11
Treaty on the Functioning of the European Union, Consolidated version: Official Journal C 326 , 26/10/2012
P. 0001 - 0390
12
The objective of the project is to develop, establish and operate a multinational Cyber and Information Domain
(CID) Coordination Centre (CIDCC) as a standing multinational military element.
9
3