European Commission launches consultation to revise EU Cybersecurity Act
The proposed revisions aim to bolster existing cybersecurity frameworks, such as the European Union Agency for Cybersecurity (ENISA) and the European Cybersecurity Certification Framework.
The European Commission has initiated a public consultation to revise the EU Cybersecurity Act of 2019, aiming to enhance the Union’s resilience against increasing cyber threats. This initiative reflects the Commission’s ongoing commitment to simplifying regulations and strengthening cybersecurity measures across member states.
The review will focus on several key areas:
ENISA’s enhanced role: The consultation seeks to evaluate and potentially expand the mandate of the European Union Agency for Cybersecurity (ENISA). This assessment aims to ensure ENISA is well-equipped to address current and emerging cybersecurity challenges effectively.
Cybersecurity certification framework: Proposals include revising the European Cybersecurity Certification Framework to streamline processes and ensure that certifications effectively address contemporary security threats.
ICT supply Chain security: Addressing vulnerabilities within the Information and Communication Technology (ICT) supply chain is crucial. The consultation invites feedback on strategies to mitigate risks associated with ICT supply chain dependencies.
Simplification of regulations: A significant objective is to simplify existing cybersecurity regulations. By reducing reporting obligations and cutting red tape, the Commission aims to foster a more business-friendly environment without compromising security standards.
The Commission encourages a wide range of stakeholders -including member state authorities, cybersecurity experts, industry associations, academia, consumer organisations, and citizens to participate in the consultation. Feedback can be submitted through the ‘Have Your Say portal and the EU Survey until 20 June.
