EU to propose cybersecurity rules

Posted by   Virus Bulletin on   Feb 6, 2013

Companies required to report breaches.

The European Union is due to set out a new set of cybersecurity rules tomorrow - in which companies including search engines, energy providers, banks and financial service providers and 'internet enablers' will be required to report any breaches or cybersecurity incidents to national bodies.

The proposals drafted by the European Commission would affect around 40,000 companies including 'internet enablers" such as Google, Facebook, Twitter, eBay and Skype, obligating them to notify national authorities of any instances in which their services are disrupted or data privacy is breached - besides cybersecurity attacks, this also includes cases of human error and natural disasters. Sanctions would be determined and enforced by the individual member states.

The proposals have been drafted in an attempt to force the hand of the various parties involved since voluntary information sharing and regulation has not so far been successful. The document states: "The current situation in the EU, reflecting the purely voluntary approach followed so far, does not provide sufficient protection against network and information security incidents and risks across the EU."

Ahead of the formal announcement of the rules, the strategy has already received criticism from various industry leaders, whose concern is that enforcing such reporting mandates could harm business - and European digital rights group EDRi claims that such a move could give national authorities access to a level of information that would be in breach of the European Convention on Human Rights.

Following the official announcement of the rules, the proposal will be reviewed by the European Parliament and the leaders of the EU's 27 national governments before (if approved) becoming law.

Posted on 06 February 2013 by Helen Martin

twitter.png
fb.png
linkedin.png
googleplus.png
reddit.png

 

Latest posts:

VB2017: What is happening in the threat landscape and what are we doing against it? Submit a proposal in the VB2017 CFP!

Have you analysed a new online threat? Do you know a new way to defend against such threats? Then submit an abstract in the CFP for VB2017!

VB2016 paper: APT reports and OPSEC evolution, or: these are not the APT reports you are looking for

APT reports are great for gaining an understanding of how advanced attack groups operate - however, they can also provide free QA for the threat actors. Today, we publish a VB2016 paper by Gadi Evron (Cymmetria) and Inbar Raz (Perimeter X), who…

Security for your ears: recommended infosec podcasts

Industry veteran Mikko Hyppönen recently urged would-be security researchers to ditch their favourite pop music and listen to security podcasts on their commute to work instead. Virus Bulletin Editor Martijn Grooten shares his favourite security…

VB2016 video: Getting duped: piggybacking on webcam streams for surreptitious recordings

In a presentation at VB2016, Patrick Wardle, Director of Research at Synack, discussed the possibilities of Mac malware recording the user via the webcam. Today, we publish the video of Patrick's presentation.

We shouldn't forget those most vulnerable in our digital world

Virus Bulletin Editor Martijn Grooten calls for the security community not to forget those most vulnerable in the digital world, including political activists living under oppressive regimes, and victims of abuse.