Cyber Resilience Act
TA-9-2024-0130 · P9_TA(2024)0130 · PE745.538
Written by a language model from the full text only; every figure comes from the text. The paragraph links open the paragraph a statement rests on — check the text itself before relying on it.
Parliament adopted its first-reading position on the proposed Cyber Resilience Act, which sets horizontal cybersecurity requirements for products with digital elements and amends Regulation (EU) 2019/1020 and other acts.¶¶¶ As Parliament and Council reached agreement, Parliament's position corresponds to the final act, Regulation (EU) 2024/2847.¶ Parliament approves a joint statement by Parliament, the Council and the Commission on resources for ENISA, the EU cybersecurity agency, annexed to the resolution.¶¶ The statement says the regulation gives ENISA extra tasks and workload, so more resources, especially human resources with the right expertise, may be needed, to be assessed in the annual budget procedure for ENISA's establishment plan.¶
Key points
- Parliament adopts its position at first reading on the proposed regulation on horizontal cybersecurity requirements for products with digital elements.¶¶
- The proposed regulation would amend Regulation (EU) 2019/1020 and other acts; the final act is Regulation (EU) 2024/2847.¶
- Parliament approves the annexed joint statement by Parliament, the Council and the Commission on ENISA resources, to be published in the C series of the Official Journal.¶¶
- The three institutions consider the regulation confers additional tasks on ENISA, resulting in additional workload and requiring more resources in expertise and number.¶
- They consider an increase in ENISA's resources, in particular human resources with adequate expertise, may be necessary, possibly through the annual procedure on ENISA's establishment plan.
- The Commission is to assess the estimates for ENISA's establishment plan for the first year after the regulation enters into force, in view of the resources needed for ENISA to carry out its tasks.
- Parliament calls on the Commission to refer the matter to Parliament again if it replaces, substantially amends or intends to substantially amend its proposal.¶
Who is affected
- ENISA: the regulation gives it additional tasks and workload, and the joint statement says more resources may be needed.¶
- Makers of products with digital elements: the regulation sets horizontal cybersecurity requirements for such products.¶
- The Commission: it is to assess ENISA's establishment plan estimates for the first year after entry into force.¶
Legal basis: Article 294(2) and Article 114 of the Treaty on the Functioning of the European Union¶