EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response

EU auditors criticize the bloc's cybersecurity strategy for critical information-sharing gaps hindering incident response.

The EU Court of Auditors issued a report criticizing the bloc's €1.4bn cybersecurity budget for suffering from insufficient information exchange, which hinders detection and response to large-scale cyber incidents. The report highlights a lack of formally defined roles between national CSIRTs and EU-CyCLONe, slow NIS2 transposition into national law, and restrictions from national security laws. It also identified duplication of effort between the European Commission's cyber-situation centre and ENISA, and noted that the European Cybersecurity Alert System's two hubs remain non-operational due to procurement delays and a lack of necessary cooperation agreements and technical standards.