European commission’s initiative to strengthen its cyber-resilience

EU council Blueprint fostering collaboration for countering cyberattacks

Last Friday June 6^th 2025, the EU Council adopted its Blueprint policy to manage cyber-crisis and incidents. In such a worrying context where the European landscape is facing increasingly serious issues in terms of cybersecurity, the EU has taken a step forward to enhancing its cyber-resilience in order to protect its citizens. Understanding that in a growing interconnected and digital society, there turns out to be a notable increased risk of incidents and cyberattacks. Polish Deputy Prime Minister Krzysztof Gawkowski stated his commitment to foster collaboration in Europe through this new initiative that’s meant to build up on the foundations laid by the 2017 cybersecurity blueprint and complements NIS²’ will be introducing risk management measures and reporting requirements to entities from more sectors. By this “Blueprint” designation, the EU refers to a non-binding strategic framework where it fosters and lays out clear roles and responsibilities for EU member-states. What’s the theoretical vision this initiative endorses? First and foremost, it comprehends the Crisis Lifecycle, from Detection to Recovery, within 5 key steps.

1. 1. Detection: Spot unusual cyber activity early and notify relevant actors, especially if cross-border impact is likely.
   2. Analysis: Assess the threat’s origin, scope, and severity; coordinate via CSIRTs network and ENISA.
   3. Escalation: Classify the incident using a 5-level scale (from Level 0 being Low Risk up to Level 4 being Crisis) ; higher levels trigger EU-wide coordination (EU-CyCLONe, IPCR)
   4. Response: Contain the threat, restore services, and coordinate decisions across Member States.
   5. Recovery: Restore systems, analyze causes, and update future response plans with ENISA’ (The European Union Agency for Cybersecurity) leading reviews.

What, genuinely, is this policy aiming at? The strategic implications and actions that requires this Blueprint to national and European authorities, institutions and private sectors are first: Updating national crisis protocols to match the EU’s shared escalation framework. It will also ensure their proactive participation in the CBX (Cyber Blueprint Exercise) and post-incident reviews, plus verifying secure communications capability and interoperability with ENISA-hosted tools. National and European stakeholders will, as well, be asked to designate a national Blueprint coordinator, responsible for cross-network liaison. In addition, The EU cyber blueprint highlights the importance of civilian-military cooperation in the context of cyber-crisis management, including with NATO, through enhanced information-sharing mechanisms where possible and when needed. Promoting inter-agency coordination and such and involving this kind of cooperation, the EU is, again, encouraging a form of “whole of government” approach. Thus, though being already based on some existing groundwork and effort from the EU, especially NIS² for cyber affairs and EU Integrated Political Crisis Response (IPCR) having this comprehension of crisis but for non-cyber cases, newly adopted EU Blueprint brings an innovative vision and pace to cyber-risk management.  In the hope that Member States will effectively and efficiently respond to this fostering announcement, we need to look toward a more peaceful EU cyber-landscape where citizens, institutions and critical infrastructures will be more prepared, resilient and aware of cyber-risks.

Arnaud Couture, PSCE

Sources: Proposal for a COUNCIL RECOMMENDATION for an EU Blueprint on cybersecurity crisis management JOINT COMMUNICATION TO THE EUROPEAN PARLIAMENT AND THE COUNCIL Cyber Blueprint – Draft Council Recommendation | Shaping Europe’s digital futureThe EU’s Cybersecurity Blueprint and the Future of Cyber Crisis Management