Growing need for a common security framework, says ENISA Head of Administration at international cybersecurity conference

ENISA’s Head of Administration, Paulo Empandinhas, was present together with international partners and institutions, and government representatives.

Paulo Empadinhas participated in the panel on "Constitution, State and Cyberspace: Contradiction in terms”? where he spoke on the ‘general data protection regulation and IoT, and the impact in the EU chart of fundamental rights’ explaining the harmonisation, simplification and update in the technological advances that the reform brings.

“Trusting IoT requires a coordinated effort from all actors, as IoT brings smartness and new security challenges” said Paulo Empadinhas. Defining security management at the organisational level, developing information exchange on threats and risks and promoting a common cyber security framework are key to secure IoT. Security concerns include the fact that manufacturers don’t invest in security and the difficulty to secure the entire lifecycle of products, while the notion of security and privacy are closely linked. With this in mind, ENISA proposes the establishment of security procurement guidelines, a framework to evaluate the security of products, and the support of security-driven business models. “There is a need for specific IoT security framework, as safety is a new parameter which needs to be integrated which goes beyond technical requirements. Cross-sector baseline capabilities, public-private collaboration and sectoral guidance, as developed by ENISA, help in this direction” said Paulo Empandinhas.

The event hosted key figures including the Secretary of State for the Presidency of the Council of Ministers Miguel S. Roque and the President of the National Commission for Data Protection Filipa Calvão.

For more information on the event Cyberlaw Research Centre and Institute of Legal and Political Sciences