On 16 September 2020, the European Union Agency for Cybersecurity, ENISA and the European Cybercrime Center, EC3 organised the 9th annual workshop for CSIRTs – in particular national and governmental (n/g) CSIRTs – and their LE (law enforcement) counterparts.
The CSIRTs and LE communities from the EU and EFTA countries, together with representatives from the EU Institutions and Bodies and the Council of Europe, met to discuss ways to effectively cooperate for the purpose of countering cybercrime. The favourable conditions for cybercrime caused by the COVID-19 pandemic have only rendered this meeting even more important. Keeping all stakeholders involved, as stressed by ENISA, has been overwhelmingly accepted in this year’s event, organised by invitation only. As a result of the COVID-19 situation, the CSIRT and LE communities had to coordinate their reactions and respond to the attacks targeting, for instance, the health sector already facing a critical situation because of the pandemic.
During the workshop the participants had also the opportunity to share success stories and bring forward national examples of cooperation and crisis management, as well as initiatives from EU Institutions and bodies. Experts discussed relevant EU policy developments, cooperation frameworks and response mechanisms against cyber threats.
Key Takeaways
Key takeaways of the workshop were that trust is the cornerstone of the CSIRTs and LE cooperation and that the judiciary needs to be involved at an early stage of a response to an attack. The event also highlighted that it is essential to have the legal and policy framework and the necessary tools and procedures in place. Finally, crises offer a unique opportunity to test CSIRTs and LE cooperation and identify gaps.
The 2020 ENISA report on CSIRTs and LE cooperation, expected to be finalised by end of 2020, will be published in the publication section of the ENISA website.
Further Information
- What is a CSIRT and how can it help me?
- Training material to enhance cooperation across CSIRTs and Law Enforcement
- Trainings for Cybersecurity Specialists - Legal & Cooperation
- Roadmap on the cooperation between CSIRTs and LE (2019)
- An overview on enhancing technical cooperation between CSIRTs and LE (2019)
- Cooperation between CSIRTs and Law Enforcement: interaction with the Judiciary (2018)
- Cooperation across CSIRTs, Law Enforcement Agencies and the judiciary
- Cooperation between CSIRTs and Law Enforcement: Behavioural Aspects
- Cooperation between CSIRTs and Law Enforcement: Legal and Organisational Aspects
- Cooperation between CSIRTs and Law Enforcement: Technical Aspects
For questions related to CSIRTs and LE cooperation, please contact: CSIRT-LE-cooperation@enisa.europa.eu