04/05/2018 (Agence Europe) – The EU directive on the security of information systems and networks (2016/1148) is due to be transposed into the law of all member states by 9 May 2018. In this regard, four European Commissioners (Ansip, Avramopoulos, King and Gabriel) have published a statement welcoming the fact that the EU now has a first set of legally binding cybersecurity rules. The directive makes essential service operators and suppliers of digital services responsible for cybersecurity. It instructs the member states to introduce national strategies, designate at least one national authority for monitoring application of the directive and a one-stop-shop for liaising with other member states (see EUROPE 11347, 11448). It gives them until 9 May to identify ‘essential service operators’ that need to take appropriate security measures and notify significant incidents. (SPj)