Cybersecurity at the EU institutions, bodies, offices and agencies: Council adopts its position on common rules
The Council recently (18 November 2022) adopted its position on a draft regulation aimed at ensuring a high common level of cybersecurity across the EU institutions, bodies, offices and agencies.
The measures were proposed by the Commission in March 2022 against the background of a significant surge in the number of sophisticated cyberattacks affecting the EU public administration in recent years. They set out to improve the resilience and incident response capacities of all the EU entities and to address the disparities in their approach by creating a common framework.
In its position, the Council lends its general support to the key elements of the proposed regulation, such as:
- strengthening the mandate and funding of the Computer Emergency Response Team for the EU institutions, bodies, offices and agencies (CERT-EU)
- setting up an interinstitutional Cybersecurity Board to drive and oversee the implementation of the new regulation
- strengthening incident-related information sharing with CERT-EU
- promoting coordination and cooperation in response to cyber incidents
At the same time, the Council has further aligned some elements of the draft regulation with the future directive on measures for a high common level of cybersecurity across the EU ('NIS 2' Directive), while removing references to the Joint Cyber Unit, whose mandate and composition have not been defined yet. It has also strengthened the mechanisms for ensuring the EU entities' compliance with the new regulation, while respecting their institutional autonomy, and ensured more reciprocity in the exchange of information between the EU public administration and the member states.
Now that the Council has established its position on the proposed regulation, it is ready to start trilogues with the European Parliament, once the Parliament has voted on its negotiating mandate.
In its conclusions of 20 June 2019, the European Council invited the EU institutions, together with the member states, to work on measures to enhance the resilience and improve the security culture of the EU against cyber and hybrid threats from outside the EU, and to better protect the EU’s information and communication networks, and its decision-making processes, from malicious activities of all kinds.
The proposal for a regulation setting out a common cybersecurity framework for the EU institutions, bodies, offices and agencies is one of the measures provided for in the EU's Cybersecurity Strategy for the Digital Decade, presented by the Commission and the High Representative of the Union for Foreign Affairs and Security Policy in December 2020 to strengthen the EU's collective resilience against cyber threats.
In its conclusions of 22 March 2021 on that strategy, the Council stressed that cybersecurity is vital for the functioning of public administration and institutions at both national and EU level and for our society and the economy as a whole.
- High common level of cybersecurity at EU institutions, bodies, offices and agencies - Council's general approach and statement
- Cybersecurity: Council adopts conclusions on the EU's cybersecurity strategy (press release, 22 March 2021)
- Cybersecurity (background information)
+32 470 89 08 50
+32 2 281 3871
If you are not a journalist, please send your request to the public information service.
Latest News from
Youth Action Plan: Council involves young people in policy-making30/11/2022 09:25:00
The Council recently (28 November 2022) approved conclusions on the Youth Action Plan for engaging young people in EU external action.
World Cup in Qatar: FIFA should help compensate families of dead migrant workers29/11/2022 16:33:00
With the 2022 FIFA World Cup having kicked off in Qatar, Parliament deplores the deaths of thousands of migrant workers ahead of the tournament.
State aid: Commission approves €557 million German support to compensate Deutsche Bahn for damages suffered by its subsidiary DB Fernverkehr due to the coronavirus pandemic29/11/2022 15:25:00
The European Commission has found a €557 million German support measure in favour of Deutsche Bahn to be in line with EU State aid rules.
A strengthened enlargement policy is the EU’s strongest geopolitical tool29/11/2022 14:33:00
MEPs call on the EU to overcome the status quo and reenergise the enlargement process both among member states and in applicant countries.
InvestEU: European Commission and Council of Europe Development Bank sign agreement to mobilise €500 million in financing for social investments29/11/2022 13:25:00
The European Commission and the Council of Europe Development Bank (CEB) have signed an InvestEU guarantee agreement worth up to €159 million.
Parliament approves €18 billion loan for Ukraine for 202329/11/2022 12:38:00
On Thursday, MEPs approved an €18 billion loan to support Ukraine during Russia’s war against the country.
Statement by President von der Leyen following her phone call with President Zelenskyy29/11/2022 11:33:00
Statement given recently (25 November 2022) by President von der Leyen following her phone call with President Zelenskyy.
Skellefteå wins 2023 Access City Award for its outstanding efforts to become accessible to persons with disabilities29/11/2022 10:38:00
The Swedish city of Skellefteå recently (25 November 2022) received the 2023 Access City Award in recognition of its long-term commitment and innovative approach to enhancing accessibility for persons with disabilities.
NextGenerationEU: European Commission endorses positive preliminary assessment of Greece's request for nearly €3.6 billion under the Recovery and Resilience Facility29/11/2022 09:25:00
The European Commission recently endorsed a positive preliminary assessment of Greece's payment request for €3.6 billion, of which €1.7 billion in grants and €1.9 billion in loans, under the Recovery and Resilience Facility (RRF), the key instrument at the heart of NextGenerationEU.
Speech by Commissioner Elisa Ferreira (video message) for the Annual Congress 2022 of the Association of Greek Regions (ENPE)28/11/2022 16:33:00
Speech given recently (25 November 2022) by Commissioner Elisa Ferreira (video message) for the Annual Congress 2022 of the Association of Greek Regions (ENPE).