Description

EU Member States adopted European Commission proposal on EU Blueprint for cybersecurity crisis management

On 6 June 2025, EU Member States adopted the European Commission’s proposal on the EU Blueprint for Cybersecurity Crisis Management ("Cyber Blueprint"). The non-binding instrument establishes a structured framework for managing large-scale cyber incidents and crises at the Union level. It outlines procedural protocols across all crisis phases, including escalation mechanisms, stakeholder responsibilities, and coordinated response measures. The framework integrates existing instruments such as the Integrated Political Crisis Response (IPCR) mechanism, the EU Cyber Diplomacy Toolbox, and the Cybersecurity Emergency Mechanism. It also aligns with sector-specific tools including the Critical Infrastructure Blueprint and the network code on cybersecurity for the EU electricity sector. The Cyber Blueprint seeks to support coordination among EU institutions, Member States, and relevant agencies, and encourages cooperation between civilian and military actors, including NATO. It updates the 2017 EU framework for coordinated response to large-scale cybersecurity incidents and incorporates lessons learned from recent cyber crisis simulations and preparedness

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services, infrastructure provider: cloud computing, storage and databases, infrastructure provider: network hardware and equipment
Implementation Level
supranational
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2025-02-24
under deliberation

On 24 February 2025, the European Commission submitted a proposal for a Council Recommendation on a…

2025-06-06
adopted

On 6 June 2025, EU Member States adopted the European Commission’s proposal on the EU Blueprint for…