The European Commission has adopted a stance to help revise the bloc’s cybersecurity rules, which have been in place since 2019. The upcoming review of the Cybersecurity Act (CSA) aims to simplify existing regulations and address challenges in ICT supply chain security. This process is crucial as the Commission seeks to ensure secure and robust cybersecurity frameworks for the European Union.
1. The扫把式路径：欧洲的合规工具和技术
The EU responsible for digitization in IT, the European Cybersecurity Agency (ENISA), faces a significant challenge as it seeks to modernize its cybersecurity strategies. The Commission has invited industry experts and national governments to provide feedback, potentially influencing changes to its mandate and financial support.
- ENISA’s mandate: The agency, which has 100 employees, is overseeing the EU-wide cybersecurity rules, including the Draft for Digital Exercise [EUCS], which is used by companies to demonstrate cybersecurity capabilities. However, the drafting process for the EUCS has been slow since 2019.
2. Social media as a surveillance tool: Risks and challenges
In Euronews’s report, last year highlighted that the Commission began seeking feedback from industry and governments on the functioning of ENISA and its financial support. This feedback is crucial to determine the agency’s current role in CBSSL and what adjustments are needed.
- SBEM and digital fitness check: During the consultation, a digital fitness check was conducted to assess the burden of existing regulations on companies. This process helps identify areas for simplification and modernization.
3. Technologyac shortage: Is the world a time of digitization?
The EU Commissioner for Technology, Henna Virkkunen, is conducting her so-called Digital Fitness Check to assess whether existing regulations are burdensome and identify simplification opportunities.
- 5G security: Virkkunen also called for member states to adopt 5G security rules, mirroring the measures already taken by countries like China for linked list nodes.
4. The consultations: Constraints and opportunities
The consultations are pending until 20 June, with opportunities from eligible parties. Industry and trade associations and cybersecurity authorities can provide feedback on the proposed changes.
Overall, the Commission’s efforts to modernize cybersecurity strategies are critical to ensuring a robust digital economy and safeguarding users against cyber threats. This process mirrors the broader movements in Europe towards IT and cybersecurity standards.
