Key Contact: Sean McElligott – Partner |
Today, Philip Lee LLP Partner and Head of Technology Sean McElligott appears before the Joint Committee on Enterprise, Tourism and Employment on the EU’s proposed Cybersecurity Act 2 (CSA2).
The EU’s aim of building resilient digital infrastructure is self-evidently positive but the Commission’s proposal is not yet carefully enough calibrated, and focused reforms can deliver its security goals while respecting Ireland’s position as an open, rules-based economy.
CSA2 does not stand alone. Read with NIS2, the ICT Supply Chain Security Toolbox and the Cyber Resilience Act, it moves decisions about who may supply critical infrastructure towards EU bodies that no single Member State controls ir can effectively influence. For Ireland, where more than 4,500 organisations are expected to fall within NIS2, that matters.
Suggested reforms to the proposal include evidence-based supplier restrictions, independent review before any ban takes effect, an assessment of alternative suppliers, Oireachtas scrutiny of designation decisions, an 18-month transposition period and alignment with the Cyber Resilience Act.
