FAQ
What is the goal of KnowCyber.eu?
KnowCyber.eu is an online knowledge hub dedicated to strengthening cybersecurity across the Western Balkans. It provides a collection of best practices, events, and activities related to national cybersecurity, offering valuable resources for professionals, institutions, and anyone interested in the field.
The platform’s main goal is to support cybersecurity capacity-building by sharing lessons learned, showcasing good practices, and promoting cooperation across the region.
KnowCyber.eu is developed under the European Union’s Cyber Balkan project, implemented by the e-Governance Academy (eGA).
What role does the European Union play in cybersecurity?
The European Union plays a key role in strengthening cybersecurity resilience across Europe and beyond. Through policies, initiatives, and funding programmes, the EU helps individuals, organisations, and governments improve their digital defences.
Key EU Directives and Regulations for Cybersecurity
What are the main EU laws and directives that shape cybersecurity policy?
The European Union has been actively developing a comprehensive legal framework to strengthen national cybersecurity across its member states. The NIS2 Directive, EU Cybersecurity Act, Critical Entities Resilience Directive (CER), Digital Operational Resilience Act (DORA), General Data Protection Regulation (GDPR), ePrivacy Directive, Cyber Resilience Act (CRA), Digital Services Act (DSA), and the AI Act form the foundation of Europe’s cybersecurity policy.
Core cybersecurity framework
What’s the goal of the NIS2 Directive (Directive (EU) 2022/2555)?
- This directive is the cornerstone of the EU’s cybersecurity efforts. It builds upon the original NIS Directive, expanding its scope to include a wider range of essential entities.
- It mandates stricter cybersecurity risk management measures, incident reporting obligations, and supervisory measures.
What role does the EU Cybersecurity Act play in the EU’s cybersecurity framework?
- This act strengthens the role of the European Union Agency for Cybersecurity (ENISA) and establishes a framework for EU-wide cybersecurity certification.
- It aims to enhance trust in ICT products, services, and processes through certification schemes.
Operational resilience and critical infrastructure
How does the Critical Entities Resilience (CER) Directive protect essential services?
- The CER Directive mandates measures to ensure the continuity of essential services across the EU, protecting them from disruptions.
- Unlike NIS2’s cybersecurity focus, CER addresses all-hazards resilience, including natural disasters, terrorism, and other non-cyber threats.
What is the Digital Operational Resilience Act (DORA)?
- DORA establishes uniform requirements for the digital operational resilience of financial entities in the EU, ensuring they can withstand, respond to, and recover from ICT-related disruptions.
- It mandates robust ICT risk management frameworks, incident reporting, and testing, while also establishing oversight of critical ICT third-party providers to the financial sector.
Data protection and privacy
How does GDPR relate to cybersecurity?
- While primarily focused on data protection, the GDPR has significant implications for cybersecurity.
- It requires organisations to implement appropriate technical and organisational measures to protect personal data, including security measures.
- It also contains breach notification requirements.
What protections does the ePrivacy Directive offer to users?
- Concerns about the processing of personal data and the protection of privacy in the electronic communications sector.
- Essentially, it aims to protect the privacy of individuals using electronic communications services.
Product and service security
How does the Cyber Resilience Act (CRA) improve the security of digital products?
- This act focuses on the cybersecurity of digital products and services.
- It establishes cybersecurity requirements for manufacturers and retailers of hardware and software with digital elements.
- It aims to ensure that products placed on the EU market are secure by design and throughout their lifecycle.
How does the Digital Services Act (DSA) make online platforms safer?
The DSA sets out rules for online intermediaries and platforms, including measures for content moderation, cybersecurity, and the removal of illegal content, creating a safer online environment for users.
Which cybersecurity measures are included in the AI Act?
- This act sets rules for online intermediaries and platforms, including cybersecurity obligations and removing illegal content.
- It aims to create a safer online environment for users.