On February 7, the European Commission issued its first comprehensive strategy to prevent and respond to cyber disruptions and attacks. The new cybersecurity strategy, along with a proposal on network and information security, aims to prevent and fight cybercrime, strengthen the security and resilience of networks and information security systems, and establish a more coherent European cyber security policy.
The strategy is offering clear priorities for the EU international cyberspace policy:
EU High Representative Catherine Ashton said at the announcement of the new strategy: “For cyberspace to remain open and free, the same norms, principles, and values that we [EU] uphold offline must also apply online.” Neelie Kroes, vice president of the European Commission responsible for the Digital Agenda said, “We are all here because we recognise the Internet is important: for our economy, for our values, and for our human rights. We all recognise that insecure systems could harm those benefits. And we recognise that we need to work together, within the EU and internationally, to achieve a safe and free Internet.”
“The international dimension also features prominently with the objective of establishing a coherent international cyberspace policy. At the bilateral level, the new strategy underscores that cooperation with the United States is particularly important and will be further developed, notably in the context of the EU-U.S. Working Group of Cybersecurity and Cybercrime.
The EUobserver reports that under the new legislative rules proposed by the European Commission, large EU-based companies will have to disclose major cyber attacks to designated national authorities. Neelie Kroes said, "Under our proposal, sectors using telecoms networks in way vital to our economy and society would have to manage risks and report significant incidents." The EUobserver article notes that "companies dealing with energy, transport, banking, healthcare, and Internet fall under the directive."