Cybersecurity

Cybersecurity, also known as information technology or computer security, involves setting measures in place that protect systems and networks from information disclosure, theft of or damage to their hardware, software or electronic data, and from the disruption or misdirection of the services they provide.

Cybersecurity has long been a European Union (EU) priority. This is most recently reflected in its long-term budget (multiannual financial framework) for the 2021–2027 period, with significant funding earmarked to support cybersecurity research, innovation and infrastructure, cyberdefence and the cybersecurity industry.

Since 2004, and strengthened by the 2019 EU Cybersecurity Act, the European Union Agency for Cybersecurity (ENISA) has been working with EU Member States and other relevant parties, delivering advice and solutions and building up their cybersecurity capabilities to jointly respond to large-scale cross-border cybersecurity incidents.

The EU’s latest cybersecurity strategy, presented in 2020, seeks to bolster its collective resilience against cyber threats and help ensure that citizens and businesses can benefit fully from trustworthy and reliable services and digital tools. It contains proposals for regulatory, investment and policy initiatives to be taken in three areas.

Improving resilience, technological sovereignty and leadership. This will be achieved by reforming the rules on the security of network and information systems. This includes adopting revised legislation (a new directive, proposed in 2020) on measures for a high common level of cybersecurity across the EU to increase the cyber resilience of critical public and private sector infrastructures.
Building operational capacity to prevent, deter and respond. A new Joint Cyber Unit is to be created to boost cooperation between EU bodies and Member State authorities responsible for preventing, deterring and responding to cyberattacks. The EU cyber diplomacy toolbox will be upgraded to prevent, discourage, deter and respond effectively to malicious cyber activities, especially those affecting its critical infrastructure, supply chains, democratic institutions and processes.
Advancing a global and open cyberspace through increased cooperation. This will be achieved by working with international partners and organisations to strengthen the rules-based global order, promoting international security and stability in cyberspace and protecting human rights and fundamental freedoms online. The EU will increase cyber capacity-building efforts in non-EU countries, along with cyber dialogues with non-EU countries, regional and international organisations and the multi-stakeholder community.