POLICIES :: NIS :: Preparatory Studies

Preparatory Studies

The studies listed hereafter support the preparation of EU's Strategy for a secure information society.

Study on the Development of a Methodology and Research of Quantitative Data on the Economics of Security and Resilience in Critical Communications and Information Infrastructures - CIIs (SMART-SEC)

Fondazione FORMIT completed in 2010 the SMART-SEC research project on the Development of a Methodology and Research of Quantitative Data on the Economics of Security and Resilience in Critical Communications and Information Infrastructures.
The SMART-SEC project aimed at collecting qualitative information and quantitative data on Critical Communications and Information Infrastructures (CIIs), to develop a methodology in order to understand the socio-economic impacts of CIIs disruptions and to study the economics of security and resilience in CIIs.

SMART-SEC study’s objectives were classified in two main sub-objectives:

Identification and characterization of the economic rationale, incentives and related market drivers that induce operators to invest and to install measures in order to protect, secure and increase the resilience of CIIs;
Measurement of the direct and indirect economic impacts of disruptions or reduced performance in CIIs and assessment of general impacts on the society at large.

In addition, the study provided recommendations for key actions to be taken by the European Commission, Member States and the private sector to improve security and resilience of critical communications and information infrastructures.

More information: full study

Study on measures to analyse and improve European emergency preparedness in the field of fixed and mobile telecommunications and Internet

Thales carried out a Study on measures to analyse and improve European emergency preparedness in the field of fixed and mobile telecommunications and Internet , between June 9th, 2009 and April 30th, 2010. The works of the present study follow in the steps of the December 2008 EPCIP Directive, in view of its future revision expected in 2012, and in which Telecommunications might rejoin Energy and Transports in the list of priority critical infrastructures.

The report of the study intends to achieve a delicate balance of suggestions that should enhance Emergency Preparedness in the Telecommunication sector, both in the sub-sectors of Fixed and Mobile Telecommunication Infrastructures and the Internet and precautions in order to allow their implementation by European Member States and Stakeholders of the Telecommunication sector whose circumstances and policies are different. By proposing a limited number of recommendations, but pragmatic and of significant impact, we intend first to help Member States and Stakeholders to better prepare for potential major crises that might affect these subsectors, and for crises affecting society at large in which telecommunications might be impacted or help their resolution.

More information: full study

Study on the Availability and Robustness of Electronic Communication Infrastructures (ARECI)

Lucent Technologies carried out a study for the Commission on the availability and robustness of electronic communication infrastructures (ARECI). The study ended early 2007 and made recommendations for key actions to be taken by the European Commission, Member States and the private sector to improve the reliability, resilience and robustness of the underlying infrastructures.

More information: full study

Study on risk preparedness in business in the field of network and information security

UNISYS and RAND Europe completed in June 2006 a study for the Commission investigating the level of risk preparedness of enterprises across the 25 EU Member States.

The study provides information on the level of awareness towards the risks of failure in information and communications technologies (ICT), provides indications on the motivation to conduct risk assessment, and provides insight in the overall attitude of businesses towards NIS risks.

Study : Executive summary
Study : Final Report
Study : Questionnaire

Study on Security Challenges to the Use and Deployment of Disruptive Technologies

The study was carried out by RAND Europe for the Commission and completed in September 2006. Study : Final Report

The aim of the study was :

To identify the challenges associated with the introduction of security during the roll-out and general implementation of disruptive technologies in information systems and networks.
To quantify, qualify and analyse the impact in terms of security of the deployment of these disruptive technologies on three main dimensions: users (citizens, businesses and public administrations) and its implications on ICT related markets.
To provide recommendations on possible policy options related to the identified challenges, particularly in the context of the i2010 policy and the information society.

Study on Members States, EEE States and Accession States activities in the field of Network and Information Security – inventory and best practices guide

This survey made completed in March 2005 by Deloitte for the Commission provided an overview of achievements of these States to create a culture of network and information security and to ensure a common approach amongst the Member States. It also highlighted the activities that could be a model for other EU countries. The study was set up to take a snapshot of public measures as at 31.12.2003. Updated information was given on the status at the beginning of 2005 where possible. Study : Final Report

Last updated: 29.4.2011