EU Cybersecurity Alert System Faces Delays and Oversight Gaps, Auditors Report
The European Court of Auditors (ECA) has released a report indicating significant shortcomings in the European Union's cybersecurity defense mechanisms. Despite allocating €1.4 billion to defend against cyberattacks, the EU's early-warning network for major cyberattacks is not yet operational. Key components, such as the ATHENA and ENSOC hubs of the European Cybersecurity Alert System, lack the necessary tools for threat detection and information sharing due to repeated procurement delays. Furthermore, essential cooperation agreements, common classification systems, and technical standards required for the alert system to function are still missing. The audit also highlighted a critical oversight: when EU cybersecurity funding is passed to third parties, there is no independent verification to ensure these organizations are not exposed to influence from hostile states. Grant beneficiaries are responsible for assessing third-party ownership and control, but the European Cybersecurity Competence Centre, whic...