FAQ

What is the goal of KnowCyber.eu?

KnowCyber.eu is an online knowledge hub dedicated to strengthening cybersecurity across the Western Balkans. It provides a collection of best practices, events, and activities related to national cybersecurity, offering valuable resources for professionals, institutions, and anyone interested in the field. 

The platform’s main goal is to support cybersecurity capacity-building by sharing lessons learned, showcasing good practices, and promoting cooperation across the region. 

KnowCyber.eu is developed under the European Union’s Cyber Balkan project, implemented by the e-Governance Academy (eGA). 

What role does the European Union play in cybersecurity? 

The European Union plays a key role in strengthening cybersecurity resilience across Europe and beyond. Through policies, initiatives, and funding programmes, the EU helps individuals, organisations, and governments improve their digital defences. 

 

Key EU Directives and Regulations for Cybersecurity

What are the main EU laws and directives that shape cybersecurity policy? 

The European Union has been actively developing a comprehensive legal framework to strengthen national cybersecurity across its member states. The NIS2 Directive, EU Cybersecurity Act, Critical Entities Resilience Directive (CER), Digital Operational Resilience Act (DORA), General Data Protection Regulation (GDPR), ePrivacy Directive, Cyber Resilience Act (CRA), Digital Services Act (DSA), and the AI Act form the foundation of Europe’s cybersecurity policy.

Core cybersecurity framework

What’s the goal of the NIS2 Directive (Directive (EU) 2022/2555)? 

  • This directive is the cornerstone of the EU’s cybersecurity efforts. It builds upon the original NIS Directive, expanding its scope to include a wider range of essential entities. 
  • It mandates stricter cybersecurity risk management measures, incident reporting obligations, and supervisory measures. 

Find it here

What role does the EU Cybersecurity Act play in the EU’s cybersecurity framework? 

  • This act strengthens the role of the European Union Agency for Cybersecurity (ENISA) and establishes a framework for EU-wide cybersecurity certification. 
  • It aims to enhance trust in ICT products, services, and processes through certification schemes. 

Find it here

Operational resilience and critical infrastructure

How does the Critical Entities Resilience (CER) Directive protect essential services? 

  • The CER Directive mandates measures to ensure the continuity of essential services across the EU, protecting them from disruptions. 
  • Unlike NIS2’s cybersecurity focus, CER addresses all-hazards resilience, including natural disasters, terrorism, and other non-cyber threats. 

Find it here

What is the Digital Operational Resilience Act (DORA)? 

  • DORA establishes uniform requirements for the digital operational resilience of financial entities in the EU, ensuring they can withstand, respond to, and recover from ICT-related disruptions. 
  • It mandates robust ICT risk management frameworks, incident reporting, and testing, while also establishing oversight of critical ICT third-party providers to the financial sector. 

Find it here

Data protection and privacy

How does GDPR relate to cybersecurity? 

  • While primarily focused on data protection, the GDPR has significant implications for cybersecurity. 
  • It requires organisations to implement appropriate technical and organisational measures to protect personal data, including security measures. 
  • It also contains breach notification requirements. 
Find it here

What protections does the ePrivacy Directive offer to users? 

  •  Concerns about the processing of personal data and the protection of privacy in the electronic communications sector.  
  • Essentially, it aims to protect the privacy of individuals using electronic communications services.    
Find it here

Product and service security

How does the Cyber Resilience Act (CRA) improve the security of digital products? 

  • This act focuses on the cybersecurity of digital products and services. 
  • It establishes cybersecurity requirements for manufacturers and retailers of hardware and software with digital elements. 
  • It aims to ensure that products placed on the EU market are secure by design and throughout their lifecycle. 

Find it here

How does the Digital Services Act (DSA) make online platforms safer? 

The DSA sets out rules for online intermediaries and platforms, including measures for content moderation, cybersecurity, and the removal of illegal content, creating a safer online environment for users. 

Find it here

Which cybersecurity measures are included in the AI Act? 

  • This act sets rules for online intermediaries and platforms, including cybersecurity obligations and removing illegal content. 
  • It aims to create a safer online environment for users. 

Find it here