Other formats:
BibTeX
LaTeX
RIS
@article{1845658,
author = {Ferguson, Donald},
article_number = {3},
keywords = {certification; cybersecurity; schemes},
language = {eng},
issn = {2662-9720},
journal = {International Cybersecurity Law Review},
title = {European Cybersecurity Certification Schemes and cybersecurity in the EU internal market},
url = {https://link.springer.com/article/10.1365/s43439-021-00044-5},
volume = {2022},
year = {2022}
}
TY - JOUR
ID - 1845658
AU - Ferguson, Donald
PY - 2022
TI - European Cybersecurity Certification Schemes and cybersecurity in the EU internal market
JF - International Cybersecurity Law Review
VL - 2022
IS - 3
SP - 51-114
EP - 51-114
SN - 26629720
KW - certification
KW - cybersecurity
KW - schemes
UR - https://link.springer.com/article/10.1365/s43439-021-00044-5
N2 - The principal question addressed by this paper is: how adequate are the minimum security objectives of the European Union Cybersecurity Act (Regulation (EU) 2019/881) in assisting organisations in the European Union internal market with resisting and recovering from cyber threats? The question is answered by first identifying the scope of the minimum security objectives. Scope identification, performed through legislative interpretation, reveals an integrated system of security objectives with significant gaps. Second, the minimum security objectives are evaluated within a model of cyber attacks from attack reconnaissance to legal proceedings to reveal further significant gaps. Finally, the minimum security objectives are evaluated within five cyber attack scenarios, reflecting the highest ranking cyber threats to the internal market. The simulation analysis accentuates the findings of the model analysis and identifies further significant gaps. In conclusion, the minimum security objectives are found to be largely inadequate in assisting organisations in the European Union internal market with resisting and recovering from cyber threats. The analysis of the adequacy of the minimum security objectives is timely, as the first European cybersecurity certification schemes are currently being designed.
ER -
FERGUSON, Donald. European Cybersecurity Certification Schemes and cybersecurity in the EU internal market. \textit{International Cybersecurity Law Review}. 2022, vol.~2022, No~3, p.~51-114. ISSN~2662-9720.
|
