New EU Legislation to Increase Critical Infrastructures in Cyprus, Says Communications Commissioner
New legislation on cybersecurity in the European Union (EU) will lead to a significant increase in critical infrastructures in Cyprus, according to Communications Commissioner George Michaelides. Currently, Cyprus has 70 critical infrastructures, but this number is set to rise to 700 under the new EU directive.
The legislation, which is expected to be adopted by 2024, aims to enhance the cybersecurity of networks and information systems. It will replace the existing NIS1 directive with the NIS2 directive, expanding the scope of security measures to include a wider range of infrastructures. This means that sectors such as supermarkets could be affected by cyber attacks, potentially impacting consumers.
The NIS2 Directive, which came into effect in 2023, modernizes the legal framework to address the growing digitization and evolving cyber threat landscape. By extending cybersecurity rules to new sectors and entities, it aims to improve the resilience and incident response capabilities of public and private entities, as well as competent authorities and the EU as a whole.
When asked about Cyprus’ preparedness against cyber attacks, Michaelides highlighted the significant progress made in recent years. He emphasized that cybersecurity efforts should be continuous and acknowledged that no one can claim to be completely shielded from cyber attacks.
Michaelides also praised the cooperation between his office and the deputy ministry of research, innovation, and digital policy. He mentioned the development of the 13 Pillars of the Cybersecurity Action Plan, which have been implemented in collaboration with the Digital Security Authority. Additionally, he highlighted the importance of hiring 18 permanent staff members for the digital security authority to ensure stability and expertise in handling cybersecurity issues.
This year, cyber attacks have targeted institutions such as the state land registry and Open University of Cyprus. In response, the deputy ministry of research, innovation, and digital policy, along with the digital security authority, has devised a cybersecurity plan that operates 24/7.