One Size Does Not Fit All: EU Commission Recommendations on Cybersecurity in the Energy Sector

As new technologies develop, the smart grid and smart devices become increasingly interconnected and exposed to security incidents. The critical nature of energy infrastructure (and the vital nature of energy supply) demands the attention of cybersecurity policies and initiatives. On April 3, 2019, the EU Commission issued its recommendations on cybersecurity in the energy sector—actions that EU member states and energy network operators should take to enhance preparedness for potential cyberattacks considering the very specific nature of the energy sector. This Legal Update gives a refresher on the EU cybersecurity framework for the energy sector and provides a summary of the EU Commission recommendations, including next steps that energy network operators should consider.