The Croatian Presidency of the EU Council has embarked on a real race against time on the Cybersecurity Competence Centre. After the interruption of negotiations with the European Parliament, Zagreb is seeking to obtain a new negotiating mandate from the Member States as soon as possible in order to bond it to the next Multiannual Financial Framework. This is due to start in 2021, if European leaders can agree.
According to our information, while Member States can still submit comments until 4 March, the Croatian Presidency hopes to be able to conclude at technical level on 11 March, at a plenary meeting of the Cyberspace Attachés. The Presidency will then forward the dossier to the Deputy Ambassadors in the hope of obtaining validation at the Telecommunications Council on 6 June.
As a reminder, the proposed regulation provides for the creation of a Centre for the pooling of investments in cybersecurity research, technology and industrial development, as well as financial support related to cybersecurity under the Horizon Europe and the Digital Europe programmes (see EUROPE 12095/18).
Almost back to the original text
If there was agreement on 6 June, it would be the second time that the Twenty-Seven have agreed on a negotiating mandate. A year ago, they had already adopted a text before interrupting negotiations with Parliament in order to clarify how the new structure would be financed.
With a view to obtaining the support of a majority of Member States, the Croatian Presidency tried to rally two contradictory positions: on the one hand, Germany’s position, which wished to build on existing structures, such as the Cybersecurity Agency for strategic tasks and the Innovation and Networks Agency for executive tasks; on the other hand, France’s position, which wanted all tasks to be carried out by the new Centre (see EUROPE 12393/17).
Finally, the draft compromise on the table of the Working Party on Telecommunications assigns all these tasks to the future Centre of Competence, while distinguishing between executive and strategic tasks under two separate headings (Article 4a). It also removes the idea of an industrial and scientific advisory committee, being satisfied with the cybersecurity community of expertise.
As regards the method of financing, Member States seem to have put aside their reluctance and would now accept some co-financing (while recognising that the involvement of two programmes with separate operating rules - namely the Digital Europe programme and Horizon Europe - does not make things any easier).
It will then remain for the Twenty-Seven to decide on the Headquarters of the new structure, which does not yet seem to be agreed. As a reminder, the European Commission proposed Brussels while the Parliament called for a democratic selection procedure. (Original version in French by Sophie Petitjean)