Taking stock of the discussion so far (Group 7)
The security group has attracted 46 members who have initiated and participated in 22 discussions. All participants provided comments, insights and raised vital questions on four key questions identified by the European Commission.
On the first key question regarding strengths and weaknesses of European ICT industry, Michele Cimmino stated that “The EU Security industry has the technology to respond to these threats, and the Digital Agenda can be a good opportunity to turn EU companies in market leaders”. At the same discussion Sathya Rao stated that “The need of the hour is collaborative working and better international standards”. Similarly to this topic, another discussion regarding A competitive European ICT security industry has been created where Michele Cimmino asks if “EU has the potential to grow a competitive ICT sector”.
On the second key question regarding barriers to a vibrant ICT security market, discussion titled “Focus on change instead of invention” Stephan Engberg comments that “bureaucracy and commercial infrastructures focus on controlling and preventing innovation rather than value creation”. As the discussion progressed he also commented that “EU needs to get its act together and align the elements to get citizens needs and demand in front of the value chains”.
On the third key question regarding incentives for more European investment in ICT security to limit risks, Chronis Adreas proposed “European Union could identify some major risk categories and make an open invitation to european vendors and startups for ideas - solutions or mechanisms that could somehow contribute to risk reduction”. Apart from this two discussions regarding Raising Security Awareness and Avoiding Misuse and SMEs Security Awareness Level which both addressed the need for measures that would raise awareness in both individuals and SMEs. Finally, a discussion regarding cyber-attacks proactiveness was started by George Pentafronimos where Rossella Mattioli stated that “The problem is not developing new systems but to educate CERTs and align both organizational and information exchange practices.The ENISA reports are a good starting point but without a real coordinational and operational power of ENISA all these efforts risk to be vain.”
On the fourth key question on how to stimulate further European Innovation and competiveness and reduce the research-market gap, Stephan Engberg commented that we should “Stop abusing "Need for Research" instead of dealing with issues that have nothing to do with research” while Costas Lambrinoudakis commented that EU should “introduce challenges and support start ups in a way that would engage researchers into a more applied research direction”. Another discussion that has drawn a lot of attention related to Cloud-based Public Administration where Michele Cimmino wondered if we “can aim at the creation of a shared EU public administration hosted in the Cloud”. Among others Theodoros Stergiou responded that “we will need to assess risks posed by personal information being used and the adoption of controls for preserving their C.I.A. according to the EU data protection directive, and so on...” and Axel Schultze replied that “Research says that over 60-80% of security threats come from inside and as such the cloud maybe even more secure”.Apart from those four key questions, discussions have also evolved around data privacy and traceability where Paul Bernal commented that “privacy needs to be a selling point - if businesses can make more by helping privacy than they make by invading it, they'll make that decision. Until then....” and Data Privacy and Security proposed EU regulations .