Cybersecurity Policy Report, EU Cybersecurity Strategy to Stress Cooperation; Directive Planned on Internal Network Security, (Feb 4, 2013)
The European Union Cybersecurity Strategy will propose a "comprehensive approach," aiming to "improve the resilience and security of network and information systems, step up the fight against cyber crime, strengthen our international cybersecurity policy, and explore synergies with defense," said Neelie Kroes, European Commission Vice President-Digital Agenda.
In a Jan. 30 speech at the Global Cyber Security Conference in Brussels, Ms. Kroes said that in addition to the strategy, the commission would propose a directive to "strengthen cyber resilience and network and information security within our internal market." The strategy and directive are expected to be adopted Feb. 7.
Key objectives of the policies include cooperation on several levels — among policy areas, among EU member states, between the public and private sectors, and among other countries around the world, Ms. Kroes said.
To promote cooperation within the EU, the commission will propose that "all EU countries equip themselves properly for network and information security, like by requiring each to have a well-functioning computer emergency response team" and a "competent authority for network and information security, who should cooperate at EU level, supported by the European Network and Information Security Agency," she said.
The public and private sectors are already cooperating extensively, so the commission will "encourage and develop public-private partnerships by leveraging existing work, like the European Public-Private Partnership for Resilience," she said.
Ms. Kroes also pointed to the need for additional international cooperation. "This isn't just the EU's issue," she said. "We need a coherent international cyberspace policy for the EU."
Ms. Kroes called for strengthening cooperation with "key international partners," such as the U.S., Japan, the Organisation for Economic Co-operation and Development, the Organisation for Security and Co-operation in Europe, the United Nations, and the International Telecommunication Union.
"We will take an active part in the global debate to develop norms for responsible behavior in cyberspace," she said. "And we will help build cybersecurity capacity in third countries."
The strategy also will aim to develop an "integrated market for secure ICT solutions," with "initiatives and incentives so all players in the ICT value chain embrace a cybersecurity culture," and will include additional measures to fight cyber crime, Ms. Kroes said.
"We will take further measures to fight botnets, improve the security and resilience of industrial control systems and smart grids, and make users both more aware of risks — and empowered to tackle them — so we can all play our part in this common responsibility," she said.
News: Cybersecurity