CIIP - Implementation activities
The EU adopted in March 2009 its
Communication on Critical Information Infrastructure Protection (COM(2009) 149).
It develops European policy to strengthen the security of and the trust in the
information society. It defines an action plan on CIIP to protect Europe from
large-scale cyber attacks and cyber disruptions, focusing on enhancing
preparedness, security and resilience.
The action plan is based on five pillars:
Pillar 1: Preparedness and prevention: to ensure preparedness by defining a baseline of capabilities and services of national/governmental Computer Emergency Response Teams, creating a European Public-Private Partnership for Resilience and a European Forum for Member States to share information and good policy practices.
Pillar 2: Detection and response: to provide adequate early warning mechanisms, by supporting the development and deployment of a European Information Sharing and Alert System, reaching out to citizens and SMEs and being based on national and private sector information and alert sharing systems.
Pillar 3: Mitigation and recovery: to reinforce EU defense mechanisms for the protection of CII, via the development by Member States of national contingency plans and the organization of regular exercises for large scale networks security incident response and disaster recovery, as a step towards closer pan-European coordination, and by strengthening the cooperation between national/governmental Computer Emergency Response Teams.
Pillar 4: International cooperation: to promote EU priorities internationally, by driving a Europe-wide debate, involving all relevant public and private stakeholders, to define EU priorities for the long term resilience and stability of the Internet, by working with Member States to define guidelines for the resilience and stability of the Internet and by working on a roadmap to promote principles and guidelines at the global level, possibly leveraging strategic cooperation with third countries.
Pillar 5: Criteria for European Critical Infrastructures in the ICT sector : to support future implementation of EPCIP (European Program for Critical Infrastructure Protection) , by continuing to develop, in cooperation with Member States and all relevant stakeholders, the criteria to identify the European critical infrastructures in the ICT sector.
Last updated: 29.03.2010