Given the potential wide-ranging impact of cyber incidents and crises, the European Commission in 2017 adopted a set of complementary documents that form a Union cooperation framework in case of large-scale cybersecurity incidents and crises.
The so-called Blueprint describes the objectives and modes of cooperation between the Member States and EU institutions, bodies, offices and agencies and how existing crisis-management mechanisms can make full use of the existing cybersecurity entities at the EU level. As cybersecurity incidents can be isolated or part of a broader crisis impacting several sectors, any appropriate response must be able to rely on both cyber and non-cyber mitigation measures.
In these Council Conclusions on EU coordinated response to large-scale cybersecurity incidents and crises, adopted in June 2018, the Council identifies several areas, namely:
- preparedness and crisis prevention;
- increasing situational awareness;
- ensuring an effective response; streamlining the public communication;
- building on the lessons learned and post incident analysis;
- developing a European Cybersecurity Crisis Cooperation Framework.