Pan-European exercise to foster preparedness in case of large-scale cyber-attacks in energy sector

Today, the Commission took part in an exercise called 'Cyber Europe', designed to test the preparedness in case of a large-scale cyber-attack on Europe’s energy sector. The exercise tested coordination, cooperation capabilities and crisis management skills in order to assess the resilience of the sector. This year's Cyber Europe exercise focused on a scenario involving cyber threats to the EU's energy infrastructure.  

The pan-European exercise brought together 30 national cyber security agencies, a number of EU agencies, bodies and networks, and over 1,000 experts covering a range of areas from incident response to decision-making.  

The Commissioner for energy, Kadri Simson said: 

'As cyber threats continue to evolve, it is imperative to prioritise cybersecurity exercises. These proactive measures not only enhance our readiness to defend against potential cyberattacks, but also underscore our commitment to safeguarding our systems. Moreover, with the growing sophistication of smart grids, the stakes are higher as the interconnected systems become more susceptible to cyber threats.'

The Commissioner for Internal Market, Thierry Breton said: 

'Cybersecurity is a common priority. In 2023 alone, more than 200 reported cyber incidents targeted the energy sector, and more than half of them were directed specifically against Europe. Cyber security threats in critical sectors can have an impact on the everyday life of citizens, but also on businesses and public services throughout the EU. This type of exercise is essential to test our cybersecurity resilience with all key partners if we are to protect EU citizens.'

Following the exercise, an analysis report will provide guidance to strengthen the resilience of the EU energy sector. Together with EU countries and the relevant EU institutions, bodies and agencies, the Commission is working to better prepare for and respond to potential large-scale cyber incidents. The Commission is working on updating its 2017 Recommendation on coordinated response to large-scale cyber security incidents and crises. 

Related links

• Critical infrastructure and cybersecurity
• Questions and Answers - EU Cybersecurity
• EU Agency for Cyber Security - Press Release