The Cybersecurity Act in the Energy Context

This paper is in response to the European Commission’s proposal of 23 September 2017, which includes specific articles on the European Cybersecurity Certification Scheme known as the Cybersecurity Act. The proposed Cybersecurity Act introduces important changes, some of which may eventually affect the cybersecurity ecosystem within the energy sector. CEER welcomes the European Commission’s proposal to establish a substantial and structured step forward to set up a stronger European system for cybersecurity. CEER sees these new proposals as potentially aiding European energy regulators in their daily regulatory functions. However, the proposed legislation poses some issues which European energy regulators believe should be reconsidered before final legislation is approved. This response paper recommends certain changes that could improve the draft legislation.