Main messages 1

 Why this area is important 7

 What we found and recommend 8

A closer look at our observations 24

 While EU cybersecurity networks and mechanisms support cooperation and response, limited information sharing and incomplete implementation reduce their effectiveness 24

  EU networks enable member state cooperation, but limited information sharing reduces their added value 24

  The EU Cybersecurity Reserve enables the quick deployment of incident response services 52

  The European Cybersecurity Alert System aims to improve threat detection capacities but is not operational 62

 EU-funded projects under DIGITAL aim to strengthen cybersecurity, but face implementation and reporting challenges 75

  Delays in its establishment prevented the Cybersecurity Competence Community from shaping DIGITAL according to its needs 75

  EU-funded projects pursue relevant objectives, but many face operational issues 82

  Most EU-funded projects have inadequate performance frameworks, and DIGITAL’s cybersecurity-related performance data is not accurate 97

Annexes

 Annex I – About the audit

 Annex II – The EU cybersecurity landscape

 Annex III – Selected cybersecurity actions

 Annex IV – ECA assessment of EU-funded cybersecurity projects

Abbreviations

Glossary

Replies of the Commission

Replies of the European Cybersecurity Competence Centre (ECCC)

Replies of the European Union Agency for Cybersecurity (ENISA)

Timeline

Audit team