The European Directive 1148 of 2016, which is come into force on 2018, obliges member states to adopt measures of resilience in the sectors that supply essential and digital services:
“For an effective response to the security challenges of networks and information systems it is, therefore, a global approach at Union level is needed, including the establishment of a common minimum capacity and minimum provisions on planning, information exchange, cooperation and common security obligations for operators of essential services and digital service providers. However, there shall be nothing to prevent the operators of essential services and digital service providers from applying security measures which are stricter than those required under this Directive. ”
Sectors of ICs identified by the European Commission listened in Communication 702 of 2004:
- energy plants and networks (power plants, gas, and oil production plants, depots and refineries, transmission and distribution systems)
- communication and technology information (for example, telecommunications, radio and television services, software, hardware and networks including the Internet)
- finance (for example, banks, financial instruments, and investments)
- the health system (for example, hospitals, health and blood collection services, laboratories, the pharmaceuticals sector and collection and rescue and emergency services)
- food supply (for example, the food industry, hygienic safety systems, production and wholesale distribution)
- water supply (e.g., basins, storage, treatment, aqueducts)
- transport i (e.g., port, airport, and intermodal services, collective rail transport systems, traffic control systems)
- production, storage, and transport of dangerous substances (e.g., chemical, biological, radiological and nuclear)
- administration (for example, crucial services, structures, information networks, assets and architectural and natural heritage).
The Enisa , an Agency established in 2004 with headquarters in Athens, is a center of competence in the field of information security to support every European Nation under cyberattack.