The current cybersecurity policy of the EU
Recognizing the severe consequences of cyberthreats, the EU has
been working continuously on its cybersecurity policy since the
proposal for the Network and Information Security Directive (NIS),
which was issued on 6 July 2016 and had to be transposed by the
Member States by 9 May 2018. The Directive was an attempt to codify
the non-binding mechanisms across the EU and to address the lack of
harmonization of the EU's cyber policy. It provides rules for
certain crucial sectors (such as utilities and digital
infrastructure) with respect to cybersecurity and non-personal data
breach notifications.
Another important building block of the EU's current
information security framework is the European Union Agency for
Cybersecurity (ENISA), created in 2004. Its aim is to assist
national authorities in coordinating their efforts in preventing
cybercrimes, sharing expertise and exchanging best practices.
ENISA's competences became
