Observed Signal · Sep 22, 2026 · Policy Update · Source: Trending Topics (DACH/CEE Innovation & Tech) · Impact: 4/5 · Sentiment: Negative
Infrastructure Market: EU Cyber Defense Partly Effective, Auditors Report
The European Court of Auditors (ECA) released Special Report 19/2026, assessing the EU's cybersecurity cooperation framework for 2022-2025. The audit found that while progress has been made, the framework only partially facilitates detection of and response to serious cyber incidents. Key issues include limited information sharing between member states, underreporting of incidents, and significant implementation delays, particularly of the NIS2 directive, with only two member states meeting the October 2024 deadline. Cross-border incident reporting remains sparse, with only 14 reported in 2025 and none classified as 'large-scale' since 2016. The Collins Aerospace ransomware attack highlighted systemic failures, as it was not treated as significant. The ECA also criticized the underutilization of the EU Cyber Reserve, non-operational cyber shield hubs, and duplication of efforts in the Commission's cyber situational centre. Five recommendations were issued, with target dates from 2026 to 2028.
Report from the European Court of Auditors highlighting significant shortcomings in the EU's cybersecurity framework, directly impacting the infrastructure that underpins the digital advertising ecosystem across Europe.
Key Takeaways & Evidence Grounding
- EU member states reported 1,276 incidents to ENISA in 2024, while ENISA identified ~4,800 from public sources.
- Only 14 significant cross-border incidents were reported by seven member states in 2025; no incidents have been classified as 'large-scale' since 2016.
- Only two member states met the NIS2 transposition deadline of October 2024.
- Two cyber hubs (ATHENA and ENSOC) are set up but neither is operational yet; the EU Cyber Reserve is underused for response.
- The ECA issued five recommendations in Special Report 19/2026, with target dates from 2026 to 2028.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.