Last week marked the first ever test of how European nations would cope when faced with a continent wide cyber-security threat. Cyber Europe 2010 brought together more than 150 representatives from 70 public-sector bodies in 30 European countries to evaluate how well they would cope in what has been called a "cyber stress test".
Ulf Bergstrom, a representative of organising body ENISA, told the BBC that these simulations were necessary because "all systems are interconnected and cross national boundaries. These networks are crucial for the European economy and that is why are co-operating at a European level".
The representatives were faced with more than 320 different 'incidents' that involved losing partial or complete access to the internet and related 'critical online services' and infrastructure. Apparently, the event went well and allowed representatives from different countries to examine each other's responses in an effort to improve their own.
However, it also highlighted some major weaknesses. The study showed that despite many of the individual member states responding well, there was a lack of centralised preparedness due to the varying maturity of each countries own measures. There was also a lack of trust between individual states that hampered the necessary communication across borders, though the exercises are reported to have helped to develop this.
Lastly, it was felt that the private sector needed to be included in future exercises. While it was prudent to limit the scope for the first event, it was important that major private-sector companies be allowed to participate going forward.
Dr Udo Helmbrecht, the Executive Director of ENISA, commented that "this was a first, key step for strengthening Europe's cyber protection. Each mistake and error made were useful 'lessons-learnt'; that is what exercises are for. Now, the challenge is for the Member States to analyse and properly implement these findings".
A detailed analysis of the whole event is due to be published in the new year.
