The EnCaViBS team successfully presented their research at this year’s BILETA conference held at the University of Exeter. With COVID-19 restrictions lifted, the team attended their first face-to-face event since the project started in 2019. Our new R&D specialist, Paula Contreras presented her paper “The transnational dimension of cyber security. The NIS Directive and its … Continued
Following an increase of cyberattacks during the coronavirus crisis, the latest cyberattacks – predominantly on Ukranian government and infrastructures – sheds light to a further aspect of the necessity for a high level of cyberresilience. Cyberattacks targeting essential services have the potential to inter alia destroy infrastructure, affect drinking water supply, hamper electricity and telecommunication … Continued
Our new team member Paula Contreras will also present her research on the NIS Directive at the 37th BILETA Annual Conference. Her paper delves into the jurisdictional challenges that arise from the NIS Directive and identifies the shortcomings of the legal provisions on jurisdiction. It also advances the idea that the Directive ambiguities have given … Continued
Pascal Steichen, Managing Director of SECURITYMADEIN.LU, has been elected Chair of the Governing Board of the new European Cybersecurity Competence Centre. The Governing Board of the Centre is composed of representatives from the Member States (27 members), the Commission (2 members) and ENISA (1 permanent observer). During the same meeting, the list of National Coordination Centers officially … Continued
Our proposal ‘To Report, or Not to Report, that Is the Question! The Struggle in Determining a Report-Worthy Cyber Incident’ has been accepted for presentation at the annual conference of the British and Irish Law Education and Technology Association (BILETA). The conference will take place on 12-14 April at the University of Exeter, UK. Registrations … Continued
Both, the NIS Directive and the GDPR introduce breach reporting obligations. In particular, in the case of the GDPR this might include an obligation to go public about an incident. These legal obligations might be in conflict with good/common practice of responsible vulnerability disclosure. This paper briefly outlines reporting duties under NISD and GDPR and … Continued