Wednesday

21st Feb 2018

Interview

Greece keen to keep EU cybersecurity agency

  • 'I clicked on a wrong link. … I have learned this time, but there is another risk coming next week, and another next week.' (Photo: Peter Teffer)

The Greek government's contact person for the EU's cybersecurity agency has welcomed a proposal to give the agency a bigger role.

"I am always saying that the next threat to European security will be through the internet, so there are huge stakes there for the EU," the secretary general for telecommunications and post, Vassilis Maglaras, told EUobserver in an interview at his office in Athens.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

  • With increased threats from cyber attacks, the EU commission has proposed increasing the mandate of the EU's cybersecurity agency (Photo: *n3wjack's world in pixels)

He spoke to this website just hours after Jean-Claude Juncker announced in his State of the Union speech that the EU's cybersecurity agency will be given a bigger mandate.

Maglaras is responsible on behalf of the Greek government for liaising with the Greece-based European Union Agency for Network and Information Security (Enisa).

Enisa will - if member states and the European Parliament accept Juncker's proposal - become a fully-fledged European Cybersecurity Agency.

Europe needs a stronger agency, Maglaras said.

He warned of a potential loss of lives if, in a future scenario, terrorists target a system of connected cars to create accidents.

The future cyber threat is no longer about "losing data ... and your personal photos, but maybe someone would be able to hijack a car", he said.

Because of the transnational nature of the internet, he said a European response is needed.

"If you have an attack, you have an attack on the systems of Europe," he noted, adding that if each European country is trying to stop a cyber attack on its own, it's a "waste of time and resources".

Yet, there are questions over how much centralisation of power in Enisa national governments will want to accept, particularly in a policy area as sensitive as national security.

Mostly research

Up until recently, the agency was mostly a research facility, issuing opinions and recommendations.

It will have some additional coordinating tasks when the new EU directive on security of network and information systems comes into force next year.

The directive is one of the reasons why the European Commission has proposed an updated mandate for Enisa, which was set up in 2004.

The cybersecurity agency is the only EU agency with a fixed term - renewed three times, currently until June 2020 - while the tasks given to it through the directive have no end date.

In the legislative proposal, which will need to be approved by member states and the EU parliament, the commission is somewhat critical of Enisa's track record.

"Enisa managed to make an impact, at least to some extent, in the vast field of network and information security, but it has not fully succeeded in developing a strong brand name and gaining sufficient visibility to become recognised as 'the' centre of expertise in Europe," the commission said in its proposal.

It said the reason for this was that the agency's "broad mandate" was not met with "proportionally sufficient resources". The commission proposed doubling the budget for staff from 2020 onwards.

Two offices

However, it also criticised the "location split between Athens and Heraklion", which has "generated further administrative costs".

After Enisa was set up in 2004, the Greek government decided that its seat should be based in Heraklion, on the island of Crete. According to Maglaras, the idea behind that decision was so it could be close to a Greek technology institute.

According to a UK House of Lords investigation, this led to problems in recruiting and retaining staff. Crete is also difficult to reach other than during the tourist seasons.

Enisa was allowed to transfer most of its staff to an office in Athens in 2013, but the administrative staff of Enisa remained in Heraklion.

The double location has been criticised by the European Court of Auditors, and the EU parliament.

According to a speech by Enisa executive director Udo Helmbrecht in 2016, this involved approximately twenty workers, but Maglaras said that the number of staff in Heraklion was between six and eight - or "something like that".

He remained fuzzy on whether the Heraklion office would be closed.

"Now with a bigger role and a bigger mandate, it should be in a more populated area, in Athens. And we will fix that … later, when the mandate is changed," he said, only to add minutes later that there "is no problem with having a few persons there", in Heraklion.

Maglaras noted that if Enisa wanted to keep the office in Heraklion open, that was also possible.

"If it's the best position to do its job for Greece and for the European citizens to be in Athens, it's okay to be in Athens," he said.

"There is no problem. It's very minor. It's not a big deal for us," he said.

The official added that the Greek government could not unilaterally decide on closing the Heraklion office, but that it had a "legal obligation" until 2020 to keep an office on the Greek island.

Maglaras seemed to refer to the 2013 regulation, the most recent legal text to set out Enisa's legal status.

That text said that staff "engaged in the administration" of the agency "should be based in Heraklion". However, that sentence is from the preamble, and the European Court of Justice ruled in 1997 that preambles have "no binding legal force".

Enisa's press office only wanted to provide a written comment, saying that the agency "has two offices and that will be situation for the current mandate".

In its legislative proposal published on Wednesday, the EU commission did not directly say that the Heraklion office should be closed, but noted the agency should "be based in an appropriate location".

Computer virus

One of Enisa's objectives will be to increase awareness of the need for "cyber hygiene" - making sure employees are not vulnerable to cyber threats.

Vassilis Maglaras himself admitted he recently learned he needed more cyber hygiene.

"Six months ago I lost all my professional data from my computer because I had a virus," he said.

"I clicked on a wrong link. … I lost files, I lost studies, I lost personal information. I lost everything. That was very painful."

He noted that the ministry had "a lot of layers of security", but that "after ten hours of working", he dropped his guard.

Now, Maglaras said he makes more backups of his files, and whenever he doesn't trust an e-mail, he passes it on to a secretary to open it on a separate computer.

"I have learned this time, but there is another risk coming next week, and another next week."

EU to beef up cybersecurity agency

The Commission's president proposed to set up a European Cybersecurity Agency. The EU already has an agency for Network and Information Security.

Opinion

EU cyber diplomacy requires more commitment

The EU is right that diplomacy is key in deterring cyberattacks. Yet, more political decisiveness and coordination are required to be successful.

EU agency to fight election hacking

A new-model EU cybersecurity agency could help states defend their elections against "hybrid attacks", the Commission has said.

Interview

EU 'underestimated' cyber-crime

"Cybercrime is growing much, much faster than I think we anticipated," the EU commissioner for security, Julian King, told EUobserver.

Facebook promises more privacy ahead of new EU rules

Speaking in Brussels, Sheryl Sandberg, Facebook's chief operating officer, says the social media giant has "not done enough to stop the abuse of our technology." Her admission comes with new plans to wrestle with "bad content".

Column / Brussels Bytes

ECJ should rule against Austrian online censorship lawsuit

EU judges have an opportunity to make clear that no member state can decide what the rest of the world reads online, now that Austria's Supreme Court has referred the Glawischnig case to the European Court of Justice.

News in Brief

  1. Commission fines car cartels €546m
  2. Juncker: 'nothing' wrong in Katainen meeting Barroso
  3. Juncker appoints new head of cabinet
  4. MEPs decide not to veto fossil fuel projects list
  5. Factory relocation risks drawing Vestager into Italian election
  6. Irregular migration into EU drops to four-year low, says Frontex
  7. Macron's new migrant law faces opposition in parliament
  8. MEPs approve anti-smuggling bill on tobacco

Stakeholders' Highlights

  1. Macedonian Human Rights Movement Int.European Free Alliance Joins MHRMI to End the Anti-Macedonian Name Negotiations
  2. International Climate ShowSupporting Start-Ups & SMEs in the Energy Transition. 21 February in Brussels
  3. Mission of China to the EUChina-EU Tourism Year to Promote Business and Mutual Ties
  4. European Jewish CongressAt “An End to Antisemitism!” Conference, Dr. Kantor Calls for Ambitious Solutions
  5. UNESDAA Year Ago UNESDA Members Pledged to Reduce Added Sugars in Soft Drinks by 10%
  6. International Partnership for Human RightsUzbekistan: Investigate Torture of Journalist
  7. EPSUMovie Premiere: 'Up to The Last Drop' - 22 February, Brussels
  8. CESICESI@Noon on ‘Digitalisation & Future of Work: Social Protection For All?’ - March 7
  9. UNICEFExecutive Director's Committment to Tackling Sexual Exploitation and Abuse of Children
  10. Nordic Council of MinistersState of the Nordic Region 2018: Facts, Figures and Rankings of the 74 Regions
  11. Mission of China to the EUDigital Economy Shaping China's Future, Over 30% of GDP
  12. Macedonian Human Rights Movement Int.Suing the Governments of Macedonia and Greece for Changing Macedonia's Name

Latest News

  1. MEPs bar WMD and killer robots from new EU arms fund
  2. Canete gets EU parliament pension while still commissioner
  3. Bank of Latvia sends deputy to ECB amid bribery probe
  4. We are not (yet) one people
  5. Intellectual property protection - the cure for Europe's ills
  6. Eastern states push back at rule of law conditions on funds
  7. Katainen explains: My friend Barroso did not lobby me
  8. A European budget: securing a prosperous future for Europe

Stakeholders' Highlights

  1. Dialogue PlatformBeyond the Errors in the War on Terror: How to Fight Global Militarism - 22 February
  2. Swedish EnterprisesHarnessing Globalization- at What Cost? Keynote Speaker Commissioner Malmström
  3. European Friends of ArmeniaSave The Date 28/02: “Nagorno-Karabakh & the EU: 1988-2018”
  4. European Heart NetworkSmart CAP is Triple Win for Economy, Environment and Health
  5. European Free AlllianceEFA Joined the Protest in Aiacciu to Solicit a Dialogue After the Elections
  6. EPSUDrinking Water Directive Step Forward but Human Right to Water Not Recognized
  7. European Gaming & Betting AssociationGambling Operators File Data Protection Complaint Against Payment Block in Norway
  8. European Jewish CongressEJC Expresses Deep Concern Over Proposed Holocaust Law in Poland
  9. CECEConstruction Industry Gets Together to Discuss the Digital Revolution @ the EU Industry Days
  10. Mission of China to the EUChina-EU Relations in the New Era
  11. European Free AlllianceEnd Discrimination of European Minorities - Sign the Minority Safepack Initiative
  12. Centre Maurits Coppieters“Diversity Shouldn’t Be Only a Slogan” Lorant Vincze (Fuen) Warns European Commission

Stakeholders' Highlights

  1. Dialogue PlatformWhat Can Christians Learn from a Global Islamic Movement?
  2. European Jewish CongressEJC President Warns Europe as Holocaust Memory Fades
  3. European Free AlllianceNo Justice From the Spanish Supreme Court Ruling
  4. Nordic Council of MinistersNordic Solutions for Sustainable Cities: New Grants Awarded for Branding Projects
  5. Mission of China to the EUTrade Between China, Belt and Road Countries up 15%
  6. Nordic Council of MinistersOresund Inspires Other EU Border Regions to Work Together to Generate Growth
  7. Mission of China to the EUTrade Between China, Belt and Road Countries up 15%
  8. AJC Transatlantic InstituteAJC Calls on EU to Sanction Iran’s Revolutionary Guards, Expel Ambassadors
  9. ILGA EuropeFreedom of Movement and Same-Sex Couples in Romania – Case Update!
  10. EU2017EEEstonia Completes First EU Presidency, Introduced New Topics to the Agenda
  11. Bio-Based IndustriesLeading the Transition Towards a Post-Petroleum Society
  12. ACCAWelcomes the Start of the New Bulgarian Presidency