On April 15, 2020, in line with its mandate to support and promote the European Union’s (“EU”) policy on cybersecurity certifications, the EU Agency for Cybersecurity (“ENISA”) released the study “Advancing Software Security in the EU – The Role of the EU Cybersecurity Certification Framework” (the “Study”).1 In the Study, ENISA stresses
EU Cybersecurity Act
EU Cybersecurity Act Published
Today, the EU Cybersecurity Act (the “Act”) was published in the Official Journal of the European Union. A central pillar of the European Union (EU) cybersecurity strategy, the Act aims to strengthen the cybersecurity features of everyday products and services and boost cyber resilience in the EU. The Act sets out a framework through…
One Size Does Not Fit All: EU Commission Recommendations on Cybersecurity in the Energy Sector
As new technologies develop, the smart grid and smart devices become increasingly interconnected and exposed to security incidents. The critical nature of energy infrastructure (and the vital nature of energy supply) demands the attention of cybersecurity policies and initiatives. On April 3, 2019, the EU Commission issued its recommendations on cybersecurity in the energy sector—actions…
The EU Cybersecurity Act is (Almost) There
A political agreement was reached between the European Parliament, the Council of the European Union (EU) and the European Commission on the EU Cybersecurity Act (Act) and announced on December 10, 2018. The pace of the adoption of the Act (with less than three months of discussions among the EU institutions) confirms that cybersecurity…
The Clock Is Ticking: Negotiating an Enhanced EU Cybersecurity Framework
On September 13, 2018, institutions in the European Union (EU) started negotiations to reach a final agreement on the EU Cybersecurity Act (Act). When adopted, the Act will create EU cybersecurity certification schemes for ICT products (i.e., hardware and software elements of network and information systems); services (i.e., services involved in transmitting, storing, retrieving or…
Toward An Enhanced EU Cybersecurity Framework: Political Agreement Reached on EU Cybersecurity Act
On June 8, 2018, a political agreement was reached in the European Union (“EU”) that paves the way to an EU framework that would set up certification schemes to apply to a range of online services and connected consumer devices, as well as the transformation of the mandate of the European Union Agency for Network…