Activites

• 2004/03/13 Final act published in Official Journal
  • Regulation 2004/460
  • OJ L 077 13.03.2004, p. 0001-0011
• 2004/03/10 Final act signed
• 2004/03/10 End of procedure in Parliament
• #2561
• 2004/02/19 Council Meeting
• 2004/02/19 Act adopted by Council after Parliament's 1st reading
• #2543
• 2003/11/20 Council Meeting
• 2003/11/19 Decision by Parliament, 1st reading/single reading
  • T5-0500/2003 summary

    The European Parliament adopted a resolution based on the draft by Reino PAASILINNA (PES, Finland.) Parliament and Council adopted a series of compromise amendments in order to ensure that the new European Network and Information Security Agency be speedily established and based provisionally in Brussels. The amendments adopted focus on the tasks of the new agency, the operational structure of the new Agency, the initial evaluation of the Agency's work and the seat of the agency. The European Network and Information Security Agency has the task of contributing to a high level of network and information security within the Community and of developing a culture of network and information security for the benefit of citizens, consumers, businesses and public sector organisations in the European Union, thus contributing to the proper functioning of the internal market. A new recital states that, to better understand the challenges in the network and information security field, there is a need for the Agency to analyse current and emerging risks. For that purpose the Agency may collect appropriate information, in particular through questionnaires, without imposing new obligations on the private sector or the Member States to generate data. Emerging risks are to be understood as issues already visible as possible future risks to network and information security. On the question of the composition of the Agency, Parliament stated that this would involve a Management Board, an Executive Director and a Permanent Stakeholders Group. Parliament deleted the Commissions provisions on having an Advisory Board and working groups. The Executive Director will establish the Permanent Stakeholders Group composed of experts representing the relevant stakeholders, such as the Information and Communication Technologies industry, consumer groups, and academic experts in network and information security. The Management Board will be composed of one representative of each Member State, (as opposed to the Commission's proposal of six representatives appointed by the Council) three representatives appointed by the Commission, as well as three representatives, proposed by the Commission and appointed by the Council, without the right to vote. Members increased the term of office for the Executive Director from two and half years to up to five years. He/she will be appointed after an open competition. The procedures regarding in particular the number, the composition, the appointment of the members by the Executive Director and the operation of the Group should be specified in the Agency's internal rules of operation and should be made public. Parliament also stressed that the objectives and the tasks of the Agency are without prejudice to the competencies of the Member State regarding network and information security and to activities concerning public security, defence, State security and the activities of the State in areas of criminal law. As to the seat of the new Agency, both Parliament and Council state, "unless otherwise determined by common accord of the governments of the Member States, the provisional seat of the European Network and Information Security Agency shall be Brussels." (Statement annexed to the Council minutes). Finally, Parliament emphasised that the Agency should payattention to small and medium sized enterprises.�

• 2003/11/18 Debate in Parliament
  • Debate in Parliament
• 2003/10/07 Vote in committee, 1st reading/single reading
  • A5-0353/2003
• #2515
• 2003/06/05 Council Meeting
  • 2515 summary

    The Council agreed on a general approach, pending the European Parliament's opinion in first reading, on the draft Regulation aimed at establishing a European Network and Information Security Agency. It requested the Permanent Representatives Committee to examine the Parliament's opinion when available so as to enable the Council to adopt a common position at a forthcoming meeting. The general approach was agreed on with two abstentions, by the German and United Kingdom delegations. The text of the general approach includes the main following changes in relation to the Commission's initial proposal: - Limitation of the Agency's activities to an advisory role and deletion of provisions concerning an advisory board. - Modification of the composition of the Management Board to include one representative of each Member State, three representatives appointed by the Commission and one representative each (without the right to vote) of the information and consumer technologies industry, consumer groups and academic experts in network and information security. - Extension of the Management Board's functions and of its involvement in the day-to-day operation of the Agency.�

• #2499
• 2003/03/27 Council Meeting
  • 2499
• 2003/03/13 Committee referral announced in Parliament, 1st reading/single reading
• 2003/02/11 Legislative proposal published
  • COM(2003)0063 summary

    PURPOSE : to present a proposal for a Regulation establishing the European Network and Information Security Agency. CONTENT the European Parliament, the Council, and the Commission are advocating closer European co-ordination on information security. The setting up of an entity with a legal personality would be the most efficient way to achieve this objective. The proposal reflects a number of concerns that were expressed during the consultation with the Member States such as the trustworthiness, competence, efficiency and consistency of the proposed Agency. The broad objective of the Agency is to create a common understanding in Europe of issues relating to information security that is necessary to ensure the availability and security of networks and information systems in the Union. To meet this objective the definition of network and information security has to be wide and cover all activities that can have adverse effects on the security of networks and information systems. The Agency shall: - provide assistance in the application of Community measures relating to network and information security. The assistance it provides shall help ensure interoperability of information security functions in networks and information systems, thereby contributing to the functioning of the Internal Market; - enhance the capability of both Community and Member States to respond to network and information security problems. The Agency will play a key role for the security of Europe's networks and information systems and the development of the information society in general; - have advisory and co-ordinating functions, where data on information security is gathered and analysed. Today both public and private organisations with different objectives gather data on IT-incidents and other data relevant to information security. There is, however, no central entity on European level that in a comprehensive manner can collect and analyse data and provide opinions and advice to support the Community's policy work on network and information security; - serve as a centre of expertise where both Member States and Community Institutions can seek advice on technical matters relating to security; - further contribute to a broad co-operation between different actors in the information security field, e.g. to assist in the follow-up activities in support of secure e-business. Such co-operation will be a vital prerequisite for the secure functioning of networks and information systems in Europe. The participation and involvement of all stakeholders is necessary; - contribute to a co-ordinated approach to information security by providing support to Member States. To ensure interoperability of networks and information systems, the Agency will also provide opinions and support for harmonised processes and procedures in the Member States when applying technical requirements that affect security. Not only legal requirements, but to a large extent technical requirements can affect the interoperability and create obstacles to the well functioning Internal Market; - further play a supportive role in the identification of the relevant standardisation needs, and in the promotion of security standards and certification schemes and of their widest possibleuse by the Commission and the Member States in support of the European legislation. As the network and information security issues are global there is also a need for international co-operation in this field. The Agency will provide support for the Community contacts with relevant parties in third countries. The Agency will be managed by an Executive Director who possess a high degree of independence and flexibility and who will be responsible for the internal functioning of the Agency.�

  • DG [{'url': 'http://ec.europa.eu/dgs/connect/index_en.htm', 'title': 'Communications Networks, Content and Technology'}],

Documents

• Legislative proposal published: COM(2003)0063
• Debate in Council: 2499
• Debate in Council: 2515
• Committee report tabled for plenary, 1st reading/single reading: A5-0353/2003
• Debate in Parliament: Debate in Parliament
• Decision by Parliament, 1st reading/single reading: T5-0500/2003
• : Regulation 2004/460
• : OJ L 077 13.03.2004, p. 0001-0011

History

(these mark the time of scraping, not the official date of the change)