International. Once approved by the Council and the European Parliament, this consensus described as "historic", will allow the creation of a large shield made up of the national and cross-border security centres operating on the continent.
The so-called Cyber Solidarity Law establishes mechanisms to increase effectiveness in detecting and learning about large-scale online security threats and incidents. At the same time, it strengthens the response capacity of organizations considered critical such as hospital institutions and public service providers.
Within the framework of the regulation, the creation of a cybersecurity infrastructure that will function in the manner of a large alert system is contemplated. Dozens of security operations centers will be articulated to create a large pan-European shield, which will protect citizens and businesses, while allowing authorities to share information and detect threats collaboratively.
Specifically, the European Cyber Solidarity Law envisages three main actions, as described below.
European Cybersecurity Alert System
Network of national and cross-border cyber centres with advanced tools such as Artificial Intelligence and data analysis to detect cyber threats. Not only will it provide real-time knowledge to authorities, but it will enable effective response to incidents.
In April 2023, two interstate consortia were formed to procure joint grants and operate a pilot phase of these tools and infrastructures under the Digital Europe Programme.
Cybersecurity Emergency Mechanism
It will support preparedness actions such as tests to detect vulnerabilities in health, energy and other critical sectors. It establishes the European Union's Cybersecurity Reserve, with response services by trusted providers, which will intervene at the request of member states or European Union agencies in the event of major threats.
The mechanism also includes mutual financial support between countries, in case of cybersecurity incidents.
European Incident Review Mechanism
It will review and evaluate significant incidents after they occur, with the aim of providing recommendations to improve cybersecurity on the continent.
