Ebrahim Bagheri, an analyst of Europe affairs, in an interview with the website of the Strategic Council on Foreign Relations, referred to the draft of the EU Cyber Security Act in the European Commission, which has been proposed under the title “EU Cyber Solidarity Act,” and clarified: The draft, is part of a larger package that has summarized the EU cyber security and provided proposals and reforms aimed at dealing with the growing cyber security threats in the future.

He continued: Before the war in Ukraine, in the joint meetings of NATO and the European Union, the issues related to transitioning from traditional threats and exceptional attention to combined wars and cyber and information threats had been discussed. The European Commission prepared a directive in 2021 that focused on the cyber security of networks and information systems and emphasized the need to create mechanisms to predict and prevent cyberattacks and hacking. The European Union also adopted strict laws, especially in infrastructure, energy, transportation, finance, and digital services.

The expert on Europe affairs said: The European Union’s Systematic Risk Board (ESRD) had announced that due to the warnings regarding the increase in cyberattacks in recent years against financial institutions and telecommunication networks, and European gas networks, there are concerns and the possibility of more widespread attacks such as the Nord Stream explosions, had been raised. In addition, the prospect of increasing cyberattacks threatens the Union even more after the war in Ukraine. It should pay more attention to financial systems and gas distribution routes.

Bagheri pointed out the concern of European countries regarding the attacks of Russian hackers on their critical infrastructures and the destructive effects against Europe, as well as the Pentagon’s claims and warnings in this regard, and added: March 2023 and one month before the draft of the EU Cyber Security Act, the United States adopted its security strategy 2023, which was said to be the product of the US ambitions to shape the cyberspace and its leadership in the fields of technology and cyber. Therefore, the European Union and the West, in general, have paid particular attention to cyberattacks and global technology leadership in recent years.

Emphasizing the participation and cooperation of the private and public sectors in the implementation and investment in new preventive plans and laws against cyberattacks in combined wars, he continued: April 18, 2023, the executive director of the European Union while explaining the objectives of the EU Cyber Solidarity Act, announced in a statement that he seeks to create a cyber security shield and a comprehensive cyber emergency mechanism and to form solidarity at the Union level to better identify, strengthen preparation and response to primary and significant cyber incidents.

Bagheri pointed out: Of course, analysis in Europe in this area has focused chiefly on cyber wars after the Ukraine war, but it should be kept in mind that this law generally seeks to strengthen cooperation across Europe and prepare for responding to cyberattacks in the future.

The expert on Europe affairs added: Most of the announced budget of one billion and one hundred million euros has been allocated to the coordination of public and private sectors and education of public and experts who can justify public opinion and familiarize them with cyberattacks as well as to strengthen the infrastructure.

Saying that many analysts see this law as a reaction to Russia’s attack on Ukraine and the increase in cyber threats against Europe, he noted: Coordination of private and public companies in 27 European countries requires the sharing of information, competence, and responsibility of private companies and for this reason, many European countries are not willing to give their national power, competences, and authority to the European Union, and this issue is a massive challenge in the path of passing this law, and there will be many differences in this regard.

Bagheri, referring to the statements of the executive vice president of the European Commission that 30 percent of small and medium-sized businesses in Europe have experienced cybercrimes at least once in the past 12 months, said: Despite the differences in this regard, for reasons such as Russian cyber threats in the shadow of the Ukraine war as well as transatlantic efforts to combat this issue, cooperation throughout Europe is inevitable.

The expert on Europe affairs said that the EU Cyber Solidarity Act consists of three essential elements for implementation, added: First, the “cyber shield” or “European Comprehensive Dome” is one of the three essential elements and components of this law. Intending to prevent and predict cyberattacks, this shield seeks to create cyber protection consisting of national and cross-border security operation centers in the fight against cyberattacks across Europe. It is scheduled to become operational by next year.

According to the analyst of Europe affairs, this shield seeks to activate regional cyber centers within Europe and its neighbors so that they can monitor and identify imminent cyber threats using various technologies, especially artificial intelligence, and warn the politicians in this regard and share information in interaction with the national centers of the countries.

He called the “cyber security reserve” the second most crucial element in the Cyber Solidarity Act. He reminded: This element seeks to strengthen the EU’s preparedness and crisis response capacity, which is implemented by creating a centralized cyber emergency mechanism, and will support various vital parts of the EU, especially energy and transportation, and essential infrastructures. Also, under this element, “financial support for mutual aid among member states” and “creating a cyber security reserve of large reliable private companies to react and respond to major cyber incidents” are mentioned.

Bagheri added: “Establishing a mechanism to investigate cyber incidents” is the third most crucial element in this Act, which tries to investigate and analyze essential incidents. Forecasting, informing the statesmen, and explaining the future developments for the statesmen to make appropriate investments in the sectors vulnerable to cyberattacks are considered under this element. Therefore, the cyber security skills academy should be established by next year to strengthen the public’s cyber skills and training experts.

He emphasized: Considering the resistance to information sharing among European countries, the EU Cyber Solidarity Act has addressed this concern, and with the huge budget that has been allocated, it has increased the possibility of advancing the Act.