syssec_red_book

24 Cyber Security Strategy of theEuropean UnionYoutube has a press conference on EU Cyber security strategy [44]that makes it crystal clear: the chances are that someone somewhere isattacking you—and you don’t even know it. In February 2013, the EuropeanCommission, together with the High Representative of the Union for ForeignAffairs and Security Policy, published a report on the cyber security strategyof the European Union [171]. The main goal of this report is to identifypriorities for protecting and promoting citizens’ rights online and for protectingcyberspace from incidents and malicious activities.The strategy further details the roles and responsibilities of different stakeholders,both nationally and EU-wide, in working together to strengthen cybersecurity. While identifying national governments as the best place to deal withcyber security challenges, the report suggests actions for EU member states aswell as EU institutions and the industry.24.1 Cyber Security PrinciplesThe cyber security strategy identified the following principles to guide thepolicy in the EU and internationally:• The same core values of the EU that apply in the physical world, applyto the digital world as well.• Cyber security should be based on protecting the fundamental rights andfreedoms of individuals, and any information sharing for the purpose ofcyber security should be compliant with EU data protection law.• The Internet’s integrity and security must be guaranteed in order to allowunhindered and safe access for everyone.• Many commercial and non-governmental entities are involved in theday-to-day management of Internet resources, protocols and standards.Thus, a democratic and efficient multi-stakeholder governance of theInternet is of great importance.