On Monday 2 December, the EU Council adopted two new pieces of legislation as part of the cybersecurity legislative package: the Cyber Solidarity Act and a targeted amendment to the Cyber Solidarity Act (‘CSA’).
The Cyber Solidarity Act, approved by MEPs last April, establishes new capabilities for the EU to better protect itself against cyber threats, notably via a pan-European alert system.
The targeted amendment enables the introduction of European certification systems for outsourced services that manage an organisation’s cybersecurity risks to be incorporated into the CSA.
This inclusion enables the Commission to adopt implementing acts on European cybersecurity certification schemes for managed security services, in addition to products, services and processes related to information and communication technologies (ICTs), which are covered by the current CSA.
The text still has to be promulgated in the Official Journal of the EU before it comes into force. (Original version in French by Isalia Stieffatre)