On April 5th, the European Parliament, the European Commission and the EU Agency for cybersecurity (ENISA) in close cooperation with the EU Member States organised an exercise to test the EU's response to and crisis plans for potential cybersecurity in
Error message
Warning: Undefined variable $state_label in enisaweb_preprocess_node() (line 422 of /var/www/html/lib/themes/enisaweb/enisaweb.theme).Leading the way in cybersecurity preparedness
Since 2010, ENISA has been organising the biennial ‘Cyber Europe’ series, a series of large-scale, cross-border cyber crisis management exercises. These exercises feature challenging, realistic scenarios inspired by real-case events and threats. ENISA develops these exercises in collaboration with European cybersecurity experts. Those exercises simulate large-scale cybersecurity incidents, escalating into cyber crises by analysing advanced technical cybersecurity incidents and by testing participants' ability to handle complex situations and share key information with their peers. ‘Cyber Europe’ brings together leading cybersecurity experts from the EU and EFTA's public and private sectors, alongside with European Institutions, Bodies, and Agencies, to strengthen their technical and operational capabilities.
Participating at Cyber Europe is a great opportunity to:
- Raise awareness on cyber issues at all levels
- Identify gaps in existing operational procedures;
- Test new cyber crisis management procedures or retest updated ones;
- Evaluate the performance of teams under high pressure;
- Identify skill gaps in teams;
- Build stronger connections within the cyber response chain (internal and external);
- Develop shared understanding and terminology;
- Enhance individual and collective skills, enhance resilience at individual and team level;
- Improve skills required for analysing advanced technical cybersecurity incidents;
- Train how to deal with complex business continuity and crisis management situations.
This provides an opportunity to improve cyber incident response at all levels—strategic, operational, and technical—both nationally and internationally, without the risk of real-world consequences.
Cyber Europe 2024
Cyber Europe 2024 was the 7th edition of this pan-European series of exercises, held in June 2024.
The scenario of the exercise envisions a foreign power, political tension and attacks to the energy sector all across EU, targeting as well as digital infrastructure and public administration as secondary objectives to increase the pressure and incite chaos
The context – Energy sector
Cyberattacks on energy and commodities infrastructure are on the rise since 2017 with a record of the number of attacks in 2022.
Cybersecurity has emerged as a major threat to commodities industries and markets over the last decade, with hackers seeking to steal data and paralyse the flow of resources. As the energy infrastructure is critical to modern economies, oil and gas companies are therefore very attractive to cybercriminals. Facing this growing threat, it is crucial for energy industry leaders to take action to safeguard against the evolving attack landscape.
That’s why Cyber Europe decided to base its biennial pan-European exercise on this sector for its 7th edition!
The scenario
The energy sector, a critical component of the European economy, has become a prime target for cyber threats amidst the ongoing geopolitical tension between the European Union and the foreign nation Voltaros.
The European Union heavily relies on its energy infrastructure to sustain its economic growth and maintain the stability of its member states. Propaganda against the EU is rampant, and there are suspicions that APTs and other criminal groups are collaborating to shift the balance of power towards their political allies by targeting critical infrastructure.
Concerns are growing regarding the possibility of massive and destructive attacks aimed at destabilising the European economy causing a domino effect. The energy sector, being a vital pillar of the European Union's economic stability, is at the forefront of these concerns. The European Union and its energy companies must remain vigilant and enhance their cyber posture to mitigate the potential impact of such targeted attacks.
Contact Details:
Any question on the Cyber Europe 2024 exercise, please contact: exercises@enisa.europa.eu
Any question on the communications and press, please contact: press@enisa.europa.eu