This week the 14th Article 13a meeting took place, hosted by ADAE, the Greek regulator for electronic communications security. The meeting was held in Athens, and was joined by experts from ENISA, the European Commission, and about 30 experts from national telecom regulators across the EU.
In this meeting there were presentations from ADAE (Greece), OFCOM (UK) and PTS (Sweden), about technical aspects of supervision of the sector. ENISA gave a sneak preview of several whitepapers which will be published this year: An ICT Buyer Vendor guide for telecom providers, an overview of national tools for the protection of underground cables, a methodology for the identification of critical information infrastructure assets, and a threat landscape for internet infrastructure.
ENISA, together with experts in the group, using input from the sector, continues to improve and adjust the Article 13a technical guidelines. As part of this ongoing process, ENISA today publishes updates of the two main technical guidelines
- Version 2.1 of the Article 13a Technical Guideline on Incident Reporting includes a new threshold for EU-wide security incident reporting. The new threshold is an absolute threshold set at 1 Million user hours lost, which should be more appropriate for the larger EU countries.
- Version 2.0 of the Article 13a Technical Guideline on Security Measures includes for each high-level security objective a set of detailed security measures, grouped in 3 sophistication levels. The new guideline allows NRAs to supervise security in a diverse sector.
Background information
The Article 13a Expert Group was set up by ENISA, under the auspices of the European Commission, to agree on a harmonised implementation of Article 13a of the Telecom Framework Directive. The group discusses about how to implement security incident reporting (nationally and across the EU) and how to supervise security measures in the telecom sector. The group also exchanges lessons learned about major incidents affecting electronic communications networks and services.
The work of the Article 13a Expert Group is explained in a short video.
For more information: http://resilience.enisa.europa.eu/article-13/
ENISA Incident reports:
ENISA publishes an overview of major outages in the EU’s telecom sector, yearly. The last report was published in September: Annual Incidents Report 2013.
Contact
For press questions and interviews, please contact: press@enisa.europa.eu.