“Experience is a good school. But the fees are high”.

ENISA urges decision makers to take action before a major cyber crisis occurs in Europe [1] Heinrich Heine

ENISA analysed the EU-level crisis management frameworks in five different sectors to make recommendations on more efficient cyber crisis cooperation and management. The report resulting from this study highlights the lessons that can be learnt from other sectors and that could be applicable in the cyber domain. The study concludes with a series of recommendations regarding EU-level priorities to alter the impact of potential cyber crises. More recently ENISA published a video related to this study that summarises the conclusions based on testimonials from experts in other sectors.

This ENISA study provides an overview of the current state-of-play of EU-level crisis management and offers an analysis, from a cyber crisis perspective, of numerous lessons learnt and challenges from decades of crisis management in the following sectors: aviation, civil protection, border control, counter-terrorism and health and disease control. The study takes a step further by providing five key recommendations on how to raise maturity in EU-level cyber crisis management. The study is based on a thorough review of the key legal and policy documents and interviews with key experts of the sectors in scope.

Currently cyber crisis management at an EU-level lacks the proper mechanisms and consistency to support effectively the EU-wide cyber community in the event of a cyber crisis, despite a number of recent initiatives within the NIS community.

The key five recommendations by ENISA regarding priorities to reinforce the EU-level capabilities to manage effectively the next cyber crisis are as follows:

• The European Commission together with the EU Member States should revisit the current EU legislation on cyber crisis management to better reflect the distinction between cause and effect and better leverage on the development of the cyber crisis management field as an essential tool for the mitigation of crises caused by cyber incidents.
• The EU Member States should develop and formally adopt an EU-level crisis management plan, specific to the crises induced by cybersecurity incidents.
• The European Commission and the EU Member States should create an EU-level pool of cyber experts with the primary objective to exchange information and best practices.
• The Member States should develop and formally adopt EU-level cyber standard operating procedures (SOPs).
• The European Commission should fund the design and development an EU-level cyber crisis cooperation platform to offer support to cyber crisis management and cooperation activities between the Member States, in conjunction with the Core Service Platform of the Cyber Security Digital Services Infrastructure (of the Connecting Europe Facility funding program).

ENISA is fully committed to support the European Commission and the EU Member States in implementing these recommendations.

To gain an insight into what is at stake, prior to reading the report, watch the introductory video with key European experts in crisis management from EEAS, Eurocontrol and ACI.

Notes to editors: Within its policy area, ENISA has been supporting the field of European cyber crisis management for several years with activities ranging from crisis simulations to trainings, supporting EU Member States in developing their crisis plans and structures, international conferences and reports such as this.

View the video

Executive summary is available here

Full report is available here

For technical information on the subject please contact the cyber-crisis cooperation team c3@enisa.europa.eu  

For media and press enquiries please contact press@enisa.europa.eu , Tel: +30 2814 409 576

Tags: