EU Auditors Identify Gaps in Response to Major Cyber Incidents
The European Court of Auditors (ECA) has highlighted shortcomings in the European Union's approach to detecting and managing significant cybersecurity incidents. Despite €1.4 billion allocated to cybersecurity under the Digital Europe Programme (2021-2027), the European Cybersecurity Alert System remains operationally inactive.
Key Findings:
- Operational Delays: The cross-border hubs ATHENA and ENSOC have not begun operations due to procurement delays.
- Missing Components: Critical elements like cooperation agreements, a common classification system, and technical standards for the alert system are still lacking.
- Limited Information Sharing: The audit reveals weaknesses in information exchange and coordination between relevant EU bodies, notably the CSIRTs Network and the EU-CyCLONe.
- Security Funding Checks: There are shortcomings in security assessments of third-party beneficiaries receiving EU cybersecurity funding.
- Overlapping Responsibilities: The European Commission's Cyber Situation Centre and the European Union Agency for Cybersecurity (ENISA) share some monitoring duties, creating potential overlaps.
Recommendations:
- Enhance information sharing among relevant entities.
- Strengthen coordination between these bodies.
- Ensure the operationalization of the European Cybersecurity Alert System.
- Implement stricter security checks on recipients of EU cybersecurity funding.
(Source: UrduPoint / Pakistan Point News / WAM)