you're reading...

Achieving a sovereign and trustworthy ICT industry in the EU

Written by Zsolt G. Pataki,

STOA Workshop - ' Achieving a sovereign and trustworthy ICT industry in the EU 'The European Union (EU) faces a number of challenges to its goal of achieving a trustworthy and cyber-resilient digital single market: (i) a lack of funding for European cybersecurity companies to scale up; (ii) fragmentation of the European cybersecurity industry; (iii) strong dependence on non-EU providers; (iv) misalignment between public research and development programmes and market needs; (v) regulatory fragmentation; and (vi) a lack of common standardisation and procurement requirements across Member States.

These are the main results, in a nutshell, of a study recently published by the European Parliament’s STOA (Science and Technology Options Assessment) Panel entitled Achieving a sovereign and trustworthy ICT industry in the EU‘. The project was proposed by Jan Philipp Albrecht (Greens/EFA, Germany), member of the STOA Panel, along with Paul Rübig, (EPP, Austria), First STOA Vice-Chair, with the aim of analysing how the EU could achieve an adequate level of cyber-resilience. Fighting cybercrime effectively and ensuring the protection of privacy is critical to guaranteeing people’s trust in a digital environment. The cross-border character of today’s cyber-threats demands a strong coordinated effort from Member States. Cyber-threat strategies remain a national competence however, with each Member State defining its own cybersecurity strategy according to its priorities. This situation seriously challenges EU coordination and results in regulatory fragmentation.

STOA Workshop - ' Achieving a sovereign and trustworthy ICT industry in the EU 'As part of this project, STOA organised a workshop on 27 September 2017, chaired by Jan Philipp Albrecht. The workshop provided additional inputs for the study and served as a forum between policy-makers, experts and the public, focusing on how digital service providers challenge data privacy and on the remedies that the EU can implement to ensure data reciprocity when citizens use search engines. Key expert speakers shared their views on the challenges that Europe faces in developing a cyber-resilient ICT industry, the risks of depending on non-EU providers, as well as the opportunities for European industry to compete in the vibrant and dynamic cybersecurity market. They agreed that establishing policies to increase EU cyber-resilience is crucial to the construction of a trustworthy digital economy and society. An institutional framework is needed in this context, where public bodies at the European and national levels can improve cooperation and coordination on tackling cyber-threats, and are able to foster a healthy and competitive cybersecurity industry in Europe, to reduce excessive dependence on non-EU cybersecurity providers.

The interim study was presented to the Civil Liberties, Justice and Home Affairs (LIBE) Committee on 21 November 2017, and received very positive feedback. The final study was discussed by experts and MEPs during its presentation to the STOA Panel on 14 December 2017.

The study identifies a set of key policy options for consideration, structured in four groups:

  1. Institutional policies aim at enhancing regulatory remedies to fight cybercrime while improving coordination between different public administrations. The role of EU bodies (mainly ENISA, the EU Agency for Network and Information Security) is limited to advising Member States and raising awareness among citizens. The Directive on security of network and information systems (NIS Directive) and the proposed regulation on the agency grant new responsibilities to ENISA, although its scope remains limited to the areas of advice and assistance. Reinforcing the role of ENISA as an independent and permanent agency, not subject to national interests, would be advisable, as suggested in the proposal for a new regulation on the agency.
  2. Market policies seek to create a level playing field across Member States, to ease cross-border trade of cybersecurity products and services. The policy options include: (i) unifying public procurement requirements of cybersecurity solutions; (ii) creating a trustworthy label for European cybersecurity products; and (iii) harmonising standardisation and certification of cybersecurity products.
  3. Industry policies focus on establishing the right conditions for the European cybersecurity industry to flourish in competition with third country providers. Policy options include: (i) fostering the development of open-source cybersecurity products; (ii) developing a cybersecurity industrial policy; (iii) supporting the creation of investment instruments focused on the cybersecurity sector; (iv) fostering market-driven research activities; and (v) increasing the availability of workers in the area of cybersecurity.
  4. Demand-side policies seek to increase end users’ (individuals and companies, mainly SMEs) commitment in and knowledge of the cybersecurity process.

In the study, each of these broad policy options is further broken down into specific policy options.

STOA Workshop - ' Achieving a sovereign and trustworthy ICT industry in the EU '

As an immediate consequence of this study, it is worth mentioning that Jan Philipp Albrecht – in his capacity as rapporteur for the LIBE Committee opinion on the Regulation on ENISA, the ‘EU Cybersecurity Agency’, repealing Regulation (EU) 526/2013, and on Information and Communication Technology cybersecurity certification (‘Cybersecurity Act’) – stated the goal of his amendments was to achieve a significant push towards higher IT security standards and better IT resilience across the EU, citing the STOA study as a reference.

To keep up to date with this project and other STOA activities, follow our website, and the EPRS blog, Twitter and Think Tank pages.

We value your opinion and we would be grateful if you could fill in a short survey. Surveys are available for all STOA studies (click on the title and follow the link).

This slideshow requires JavaScript.

About Scientific Foresight (STOA)

The Scientific Foresight Unit (STOA) carries out interdisciplinary research and provides strategic advice in the field of science and technology options assessment and scientific foresight. It undertakes in-depth studies and organises workshops on developments in these fields, and it hosts the European Science-Media Hub (ESMH), a platform to promote networking, training and knowledge sharing between the EP, the scientific community and the media. All this work is carried out under the guidance of the Panel for the Future of Science and Technology (STOA), composed of 27 MEPs nominated by 11 EP Committees. The STOA Panel forms an integral part of the structure of the EP.


No comments yet.

Leave a Reply

Download the EPRS App

EPRS App on Google Play
EPRS App on App Store
What Europe Does For You
EU Legislation in Progress
Topical Digests
EPRS Podcasts

Follow Blog via Email

Enter your email address to follow this blog and receive notifications of new posts by email.

Join 3,550 other subscribers

RSS Link to Scientific Foresight (STOA)

Disclaimer and Copyright statement

The content of all documents (and articles) contained in this blog is the sole responsibility of the author and any opinions expressed therein do not necessarily represent the official position of the European Parliament. It is addressed to the Members and staff of the EP for their parliamentary work. Reproduction and translation for non-commercial purposes are authorised, provided the source is acknowledged and the European Parliament is given prior notice and sent a copy.

For a comprehensive description of our cookie and data protection policies, please visit Terms and Conditions page.

Copyright © European Union, 2014-2019. All rights reserved.

%d bloggers like this: