EU Cybersecurity Strategy Hampered by Fragmented Oversight and Secrecy

The report, covering actions between 2022 and 2025, highlights a critical disconnect between Brussels’ strategic ambitions and the reality on the ground in member states like Ireland, Greece, and Italy. Auditor George-Marius Hyzler noted that the current cooperation network lacks the necessary efficacy to manage modern threats. Rather than proposing new legislation, the audit emphasizes that the existing framework is sufficient if only national governments would adhere to established information-sharing mandates.

This friction is exacerbated by the diverse security philosophies held by individual capitals. Dimitar Lilkov of the Wilfried Martens Centre for European Studies points to a two-front challenge: hardware vulnerabilities linked to Chinese suppliers and a steady stream of Russian-sponsored disinformation and cyber-attacks. With national authorities still holding primary responsibility for incident response, the European Union struggles to bridge the gap between its centralized funding and the fragmented, often secretive, implementation of security protocols across its borders.