cyberspace operations is a national prerogative of Member States, while relying on a wider ecosystem, including a strong industrial base supported by EU-level capability development. The EU cyber defence community, composed of Member States’ defence authorities and supported by EU institutions, bodies and agencies (EUIBAs), has certain specificities in comparison to the other cyber communities8 and follows a different governance model. The absence of an established framework for information exchange and cooperation among EU military Computer Emergency Response Teams (milCERTs), including in support of military CSDP missions and operations, is problematic in view of the heightened level of cyber threats from state and non-state actors. Cooperation between civilian, diplomatic and law enforcement cyber communities and their defence counterparts will bring high added value to all actors concerned. It is therefore crucial to enable such collaboration by providing suitable and secure means for information exchange and engage in exercises and other activities that build trust and common understanding. Furthermore, there is currently only limited mutual operational assistance between Member States. The further expansion of the concept of cyber rapid reaction teams across the EU should be explored, building on the related Permanent Structured Cooperation (PESCO) project Cyber Rapid Response Teams and Mutual Assistance in Cyber Security (CRRT)9, including in the context of Article 42(7) Treaty on European Union (TEU)10 (‘mutual assistance clause’) and Article 222 Treaty on the Functioning of the European Union (TFEU)11 (‘solidarity clause’). In a similar vein, one of the lessons learned from the successful Ukrainian cyber defence in the context of Russia’s war of aggression is the decisive role played by the private sector. It should therefore be explored to which extent the private sector could also contribute to enhancing cyber response. 1.1 Strengthening common situational awareness and coordination within defence community Given the scale of the risk associated with cyberattacks, Member States need to have the most complete collective situational awareness at their disposal, including early detection capacity as well as the resources to respond properly and recover in a solidary and coordinated manner. As far as military situational awareness is concerned, there is a need to establish an EU Cyber Defence Coordination Centre (EUCDCC) supporting enhanced situational awareness within the defence community, including all EU military CSDP commanders. The High Representative will present the proposal for the EUCDCC for Member States consideration, building on the PESCO Cyber and Information Domain Coordination Centre (CIDCC) project12. It will aim to provide a holistic analysis of cyberspace, the electromagnetic environment, and the cognitive domain by bringing together different sources of information to the military strategic and operational levels. Appropriate links should be established between EUCDCC and the EU Intelligence Analysis Centre (EU INTCEN) as well as the EU Military 8 Civilian, diplomatic and law enforcement cyber communities Cyber Rapid Response Teams and Mutual Assistance in Cyber Security 10 Treaty on European Union, Consolidated version: Official Journal C 326, 26/10/2012 P. 0001 - 0390 11 Treaty on the Functioning of the European Union, Consolidated version: Official Journal C 326 , 26/10/2012 P. 0001 - 0390 12 The objective of the project is to develop, establish and operate a multinational Cyber and Information Domain (CID) Coordination Centre (CIDCC) as a standing multinational military element. 9 3

Select target paragraph3