Member states are currently working on developing 'common messages' that could serve as a basis for EU statements in the event of cyber attack. This was revealed in a working document from the European External Action Service (EEAS) – a copy of which was obtained by EUROPE – and presented to a Council working group on 7 September this year.
In 2017, the EU acquired a 'cyber diplomacy toolbox', a framework for a joint EU diplomatic response to malicious cyber activity (see EUROPE 11811). In this context, member states had called for common lines to be set in place ready for use.
“These ‘common messages’ could significantly shorten the consultation procedures, including those with member states, (...) contributing to a swift, appropriate and effective joint EU response to malicious cyber activities”, the document explains.
When it comes to consultation of the member state agreement, silence procedures currently vary between one to three hours minimum in urgent cases and usually take at least one day.
The document thus suggests around a dozen “common messages”. In addition to recalling the facts and condemning the malevolent use of technology, there are also encouragements to prosecute those responsible for the attacks and to fight against impunity in cyber-space, as well as references to the EU’s will and ability to act, including by restrictive measures, without forgetting the “importance of a global, open, free, stable and secure cyberspace where human rights and fundamental freedoms and the rule of law fully apply”.
Member states have until 28 September to submit their comments. According to a European source, the document does not aim at adoption by the Council of the EU but should rather be approved at the level of the Council working group, if not possibly at the level of the Political and Security Committee (PSC). (Original version in French by Marion Fontana and Camille-Cerise Gessant)