EU: Cybersecurity: report on the implementation of the Network and Information Security Directive

Topic
Country/Region
EU

Support our work: become a Friend of Statewatch from as little as £1/€1 per month.

A brief report from the Commission to national delegations in the Council's 'Horizontal Working Party on Cyber Issues', issued in early December 2016, outlines the situation regarding implementation of the EU's Network and Information Security Directive (Directive (EU) 2016/1148 concerning measures for a high common level of security of network and information systems across the Union, link).

See: Note for the Horizontal WP on Cyber Issues: Update on NIS Directive implementation process (9 December 2016, contained in Council document 14948/16, pdf)

The Directive requires the adoption by every Member State of a strategy on the security of network and information systems and the setting up one or more Computer Security Incident Response Teams (CSIRTS); an increase cooperation amongst Member States at EU level; and the establishment of mandatory incident reporting "for operators of essential services and digital service providers."

The Directive is supposed to be implemented at national level by February 2018. The Commission's report notes that:

"Member States are at very different stages in the transposition process. In some countries the transposition process is quite advanced, whereas in some others it is just starting. During all visits so far it was apparent that the role of the Cooperation Group will be crucial to ensure that the Directive is transposed and implemented in a consistent manner across the EU."

The report: Note for the Horizontal WP on Cyber Issues: Update on NIS Directive implementation process (9 December 2016, contained in Council document 14948/16, pdf)

Our work is only possible with your support.
Become a Friend of Statewatch from as little as £1/€1 per month.

 

Spotted an error? If you've spotted a problem with this page, just click once to let us know.

Report error