Recommendations on aligning research programme with policy

The EU Cybersecurity Strategy  includes a number of measures aimed to promote a Single Market for cybersecurity products together with fostering research and development investments and innovation. The development of a Digital Single Market is also the main objective of the Digital Agenda (currently Digital Single Market strategy ), one pillar being strengthening online trust and security, on which the growth of the European economy and the development of a strong digital business sector depend. The Digital Agenda sees internet trust and security as vital to a vibrant digital society and considers a high level of network and information security across the EU essential to ensure consumer confidence and to keep the online economy running. Although there is state-of-the-art research in Europe in the field of NIS, and this area is extensively supported by European funded programs, research is usually not focused on the aspects where NIS policies need available technologies to move forward on their implementation.

The scope of this report is to review existing analysis reports on EU funded Trust and Security Projects, summarize achievements that have significantly promoted specific pillars of NIS, identify and summarize specific outcomes that can promote and support emerging policy and legislative initiatives, namely eIDAS, GDPR, support industry policy in cybersecurity, and provide recommendations on the formulation of forthcoming work programmes.  For the analysis of the selected projects, through their reports, six assessment pillars were identified, based on the ICT & Trust and Security interrelated thematic areas and emerging policy and legislative initiatives aspects. For each project, achievements that can significantly promote/favour specific pillars of NIS, are identified along with specific outcomes that can favour and support emerging policy and legislative initiatives - notably: eIDAS, GDPR, NIS and industry policy in cybersecurity, including the cybersecurity cPPP.