How to ensure cybersecurity in the EU and worldwide

"The European Union continues to believe in an open, safe and secure cyberspace. The same norms, principles and values that the EU upholds off-line, should also apply on-line. Fundamental rights, democracy and the rule of law need to be protected in cyberspace," stated Ambassador Carl Hallergard, Deputy Head of the EU Delegation, in his opening remarks. Cyber-attacks are multiplying; power supply, transport lines, banking or other essential services can potentially be disrupted by malicious actors, whether terrorists or state-sponsored actors. More than one million people worldwide are victims of cybercrime every day, more than one in ten internet users has already become victim of online fraud. "The cyber threat is only growing in volume, as the increasing number of internet-connected devices will add security flaws," said Ambassador Hallergard.

He highlighted the five strategic priorities of the European Cybersecurity Strategy: enhancing cyber resilience of IT systems, reducing cybercrime, strengthening EU international cyber security policy and cyber defence, and developing the industrial and technological resources for cybersecurity.

"Ensuring cyber security is a common responsibility" argued Ambassdor Carl Hallergard, adding that "it is important that not only the public sector, but also the private sector develop strong cyber resilience capabilities and share best practices."  He called for stronger national, European and international action and cooperation in cyberspace, involving both states and non-state actors. He pointed out that further EU action can help to counter in particular those cyber risks and threats which have a cross-border dimension. The EU can also facilitate a coordinated response in emergency situations. Various initiatives have been put forward to set up coordinated prevention, detection, mitigation and response mechanisms, enabling information sharing and mutual assistance amongst the national authorities. In 2016, the EU Council consisting of representatives of 28 EU Member States adopted the EU's first cyber security legislation: the Network and Information Security (NIS) Directive. The NIS Directive will significantly enhance cyber resilience of the civilian critical infrastructures in all EU Member States, including e-commerce platforms, social networks and transport, banking and healthcare.

"Internationally, the EU believes that the existing international law is applicable in cyberspace. There is no need for creation of new international legal instrument for cyber issues," said Ambassador Hallergard. Apart from engaging in international fora and cooperating with other international organisations such as NATO, the EU has established formal bilateral cyber dialogues with key partners such as the United States, India, Japan, the Republic of Korea, China and Brazil.

Ambassador Hallergard also emphasized that "developing countries should also fully benefit from the social, economic and political development opportunities offered by information and communication technologies. Appropriate domestic legislation and enforcement have to be in place. The EU will continue to provide support to capacity building to ensure that no country is left behind. Through various instruments of cooperation, these EU action currently amount to 45 million euros."