EU pledges to bolster cybersecurity amid concerns over US dependency

The European Union is intensifying its efforts to enhance cybersecurity measures for businesses and governments, following a funding scare in April that highlighted Europe’s significant reliance on U.S. cyber infrastructure. The move follows the realisation that disruptions in American funding could significantly impact Europe’s cybersecurity preparedness, highlighting vulnerabilities in the EU’s current digital defence setup.

Juhan Lepassaar, executive director of Enisa, the EU’s cybersecurity agency, emphasised the need for Europe to intensify its efforts. “We just haven’t had the global system so far, which relies to a large extent on capabilities in the United States,” Lepassaar said. This has led to a renewed focus on establishing a more robust, independent European framework.

Why is Europe stepping up its cybersecurity capabilities?

The EU’s decision to boost cybersecurity comes after a temporary threat to U.S. government funding for a critical online security programme, managed through a non-profit and overseen by the U.S. cyber agency CISA. Although funding resumed, the incident highlighted Europe’s vulnerability due to dependence on U.S.-managed cyber infrastructure, especially amid rising cybersecurity threats and concerns over sustainability.

What measures is the EU implementing to enhance cybersecurity?

Last month, the EU launched a new “European vulnerability database” aimed at identifying and communicating potential cyber threats specifically to European businesses and governments. This database aims to independently propose patches and guidelines for managing vulnerabilities, reducing dependency on the U.S. and enhancing Europe’s cybersecurity resilience.

Which sectors are currently most vulnerable?

According to Lepassaar, while sectors such as electricity, telecoms, and banking have advanced cybersecurity measures, areas including public administration, healthcare, and wastewater management remain significantly vulnerable. He identified these sectors as a “risk zone,” emphasising the urgent need for targeted cybersecurity improvements.

The EU’s recent cybersecurity enhancements are part of a broader initiative, including updates to the Cybersecurity Act and the adoption of stricter cyber resilience rules for digital products.