Government
,
Industry Specific
,
Regulation
ENISA’s Laura Heuvinck Shares Index Findings, Implications for EU Cybersecurity
In the latest EU Cybersecurity Index, member states scored an average of 64.51 out of 100, reflecting a moderately strong level of preparedness for cyber incidents. ENISA spokesperson Laura Heuvinck discussed the findings and key areas for improving Europe’s cybersecurity posture.
See Also: OnDemand | Agency Armor: Cybersecurity Compliance Essentials for Resource-Constrained Teams
But the above-average scores in the report by the European Union Agency for Network and Information Security haven’t translated into uniform progress.
At least 21 EU countries missed the October 2024 deadline for implementing the EU Network and Information Security Directive, or NIS2, which imposes cybersecurity risk management and incident reporting obligations for organizations working across critical sectors such as finance, energy and healthcare (see: Most EU Nations to Miss Upcoming NIS2 Deadlin).
“The legal provisions of the NIS2 scope can be tricky, so member states really need to take care when drafting their legal texts. There can always be certain legal uncertainties. So, this might be some of the reasons why there may be some delays,” Heuvinck said.
In this video interview with Information Security Media Group, Heuvinck discussed:
- The EU-CSI 2024 scores and what they reveal about the state of cybersecurity in Europe;
- The EU’s preparedness for large-scale cyberattacks;
- How the NIS2 Directive is reshaping incident response and regulatory alignment;
- Challenges member states face in implementing NIS2.
Heuvinck serves as lead spokesperson for media and policy communications for the European Union Agency for Network and Information Security, playing a key role in bridging the agency’s technical expertise with public discourse and EU-wide strategic initiatives.
