The new regulations, collectively termed the ‘Cyber Solidarity Act,’ mark a significant stride in the European Union’s efforts to fortify its resilience against cyber threats. The regulation was agreed upon by the EU Council and Parliament, and seeks to enhance the region’s ability to respond swiftly and effectively to cyber incidents.

One of the key provisions is the establishment of an emergency alert system, designed to disseminate information quickly throughout the union. 

Additionally, the regulation lays the groundwork for a cybersecurity emergency mechanism, which include preparedness actions, mutual financial assistance, and the creation of a ‘cybersecurity reserve’ of incident response services from the private sector. 

“Today’s agreements set new milestones for Europe’s cyber resilience. These rules will strengthen the EU’s and member states’ capabilities to prepare, prevent, respond, and recover from large-scale cyber threats or incidents,” said Mathieu Michel, Belgian secretary of state for digitisation, administrative simplification, privacy protection and the building regulation.

“Moreover, creating the possibility for the certification of managed security services will help to ensure a high common level of these cybersecurity services across the EU by facilitating their cross-border provision to the benefit of our citizens and businesses.”

In tandem with the ‘Cyber Solidarity Act,’ the EU Council and Parliament have endorsed an amendment to the 2019 Cybersecurity Act. This amendment aims to introduce European certification schemes for managed security services, to enhance their quality and comparability.

Recommended reading

• Cyber Experts Call Out “Counterproductive” EU Vulnerability Disclosure Rules
• Cybersecurity Workers Embrace AI Despite Threats
• The Unique Cybersecurity Threats Facing Education Institutions

The announcement follows the EU’s adoption of its inaugural Cybersecurity Certification scheme for digital products in January 2024, underscoring the bloc’s commitment to elevating cybersecurity standards across various domains.

The push to bolster cyber response capabilities within the EU has been a longstanding priority, highlighted by reports of a major supply chain cyber-attack simulation conducted by the EU in 2022.