[ad_1]
Following the outline of the 2022 European Union action plan to digitalize the energy system, the European Commission has adopted the first-ever EU network code on cybersecurity for the electricity sector.
The first-ever EU network code, foreseen under the Electricity Regulation, is an important step to improve the cyber resilience of critical EU energy infrastructure and services, the Commission said in a media release
“It will support a high, common level of cybersecurity for cross-border electricity flows in Europe. The dossier now passes to the Council and European Parliament to scrutinize the text and the rules will enter into force once this period is over”, the Commission said in the release.
The network code aims to regularly assess cybersecurity risks in the electricity sector. These assessments aim to identify entities involved in digitalized processes impacting cross-border electricity flows, analyze their cybersecurity risks, and determine necessary mitigating measures.
The network code establishes a governance model aligned with existing EU legislation, such as the Network and Information Security Directive, the Commission said.
The model includes reporting cyber incidents using Computer Security Incident Response Teams and coordinating with the CyCLONe network for large-scale incidents. The rules aim to create a common baseline while respecting current practices and investments. This model also involves developing, following, and reviewing methodologies of various stakeholders in both cybersecurity and electricity regulation, the Commission said.
“Today’s delegated act follows an extensive consultation process with relevant stakeholders, including contributions from ENTSO-E, EU DSO Entity, and ACER, and a 4-week period for public feedback at the end of last year”, said the Commission, which also informed the European Parliament about the initiative.
The delegated act is now subject to scrutiny by the European Parliament and Council, which have two months each for objection. This period can be extended by two additional months, the Commission said.
To contact the author, email [email protected]
[ad_2]