Skip to content
DRAFT REPORT (COM(2023)0209 – C90136/2023 – 2023/0109(COD))

On the proposal for a regulation of the European Parliament and of the Council laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cybersecurity threats and incidents

ITRE-PR-752795

Committee on Industry, Research and Energy · Rapporteur: Lina Gálvez Muñoz

Official HTML ↗ PDF DOCX
✦ In shortFull text
✦ In short · AI summary of this text, generated 26 Sept 2026

Written by a language model from the full text only; every figure comes from the text. The paragraph links open the paragraph a statement rests on — check the text itself before relying on it.

The rapporteur's draft report sets out Parliament's amendments to the proposed regulation on EU measures to detect, prepare for and respond to cybersecurity threats and incidents. It would deploy a European Cyber Shield of national and cross-border Security Operations Centres, set up a Cybersecurity Emergency Mechanism and an EU Cybersecurity Reserve, and create an incident review mechanism. It adds rules on skills and competences, including a link with the EU Cybersecurity Skills Academy and a focus on women, and on funding for ENISA and for activities beyond 2027. It also sets conditions for third-country participation and gives the Commission delegated powers to supplement parts of the regulation.

Committee position. The rapporteur proposes to amend the Commission proposal to strengthen solidarity and capacities, enhance trust and governance, secure funding beyond 2027, develop skills with a focus on women, and clarify the EU Cybersecurity Reserve and incident review.

Key points

  1. The regulation would strengthen Union detection and situational awareness of cyber threats, grow industrial capacity and support technological sovereignty.
  2. A European Cyber Shield of National SOCs and Cross-border SOCs would be deployed, with each Member State designating at least one public National SOC.
  3. Cross-border SOCs would bring together National SOCs from at least three Member States and cooperate with ENISA, complementing existing SOCs and CSIRTs.
  4. Cross-border SOCs would share information with EU-CyCLONe, the CSIRTs network and the Commission, without imposing extra reporting obligations on public or private entities.
  5. A Cybersecurity Emergency Mechanism would support Member States in preparing for, responding to and recovering from significant and large-scale incidents.
  6. An EU Cybersecurity Reserve of incident response services from trusted providers would be set up, deployable in all Member States, with ENISA entrusted with its operation.
  7. The Commission should request ENISA to prepare a candidate certification scheme for managed security services, and ENISA should receive adequate additional funding.
  8. A Cybersecurity Incident Review Mechanism would review specific incidents, with ENISA collaborating with stakeholders and reporting lessons learned from peer reviews under Directive (EU) 2022/2555.
  9. The regulation would develop cybersecurity skills and capabilities with the Cybersecurity Skills Academy, close the talent and gender gaps and boost the Union cyber workforce.
  10. Skills measures would focus on women, who comprise 20 % of the average worldwide presence in cybersecurity, and reinforce the triangle between national competence centres, the ECCC and ENISA.
  11. A specific budget line in the multiannual financial framework for 2028 to 2034 should ensure continuity beyond 2027, with Member States committing to support measures.
  12. Third countries could access resources and support, with specific conditions possibly limiting participation of entities from non-associated third countries, subject to public scrutiny.

Who is affected

  • Member States, which designate National SOCs, request EU Cybersecurity Reserve support and commit to funding.
  • Private providers of managed security services, which may join the EU Cybersecurity Reserve and need certification.
  • Small and medium-sized enterprises, which would benefit from industrial capacity and research and innovation investment.
  • Local and regional authorities, which are vulnerable targets and should increase digital resilience.
  • Third-country actors, whose participation may be limited by specific conditions.

Figures and deadlines

  • 20 % — women's share of the average worldwide presence in cybersecurity.
  • 2028 to 2034 — period of the multiannual financial framework for a specific budget line.
  • 31 December of the following financial year — deadline for carried-over commitment and payment appropriations.
  • at least three Member States — minimum number of National SOCs in a Cross-border SOC.
  • 2023 — the European Year of Skills.

Legal basis: Article 294(2) and Articles 173(3) and 322(1), point (a), of the Treaty on the Functioning of the European Union.