The EU Cybersecurity Strategy: Implications and Lessons for Other Regions

RESEARCH OBJECTIVE: This article aims at a description of the structure of cybersecurity in the EU, taking into account its most important objectives and characteristics, as well as its geopolitical and international context. THE RESEARCH PROBLEM AND METHODS: The cybersecurity­-focused discourse usually refers to the national dimension of security. However, the multidimensionality of cybersecurity determines the need to build cyber capacity also on the basis of cooperation in international relations, including the economic dimension. The article attempts to fill the gap in the discussion of the perception and implementation of cybersecurity at the transnational level, with reference to European Union activities. In carrying out this task, the paper relies on institutional and legal analysis, combined with a review of the literature and documents and normative acts. THE PROCESS OF ARGUMENTATION: The article is composed of three parts. Part one sets out considerations on the conceptualisation of cybersecurity; part two describes the framework of cybersecurity in the EU; finally, taking into account the perspective of international organisations, part three presents implications resulting from the EU’s experience. RESEARCH RESULTS: The economic dimension (link to the functioning of the European single market) is of particular importance in the practical application of the EU’s integrated approach to cybersecurity, alongside technical issues, building digital resilience and citizen awareness. What distinguishes the implementation of cybersecurity in the EU is the activity in the field of implementing regulations concerning, among other things: the resilience and responsiveness of selected public and private entities throughout the EU, the security of ICT products, services and processes. CONCLUSIONS, INNOVATIONS, AND RECOMMENDATION: EU action can serve as a global example of an active approach in the field of cybersecurity by an international organisation which is not concerned with military or defence issues, while seeking to promote cybersecurity principles and standards internationally.