The European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence on July 7, setting out how the European Union intends to manage the risks and harness the opportunities that advanced AI models pose for digital security.
What the plan does
According to the Commission, the plan rests on several strands. It will help build EU capacity to evaluate advanced AI models for cybersecurity risks before they reach the market, backing the AI Office’s oversight role under the bloc’s AI Act. It also directs the Commission to work with the EU Agency for Cybersecurity (ENISA) on a “European blueprint” for secure, structured access to advanced AI systems for cybersecurity work, and to stand up a testing platform, built with ENISA and the Commission’s Joint Research Centre, where organizations in sectors such as energy, health and finance can trial AI tools before deploying them. A planned EU Grand Challenge is meant to spur homegrown research into AI for cybersecurity.
Rather than proposing new legislation, the Commission is directing itself, ENISA and member states to act on rules already in place, including the NIS2 Directive and the Cyber Resilience Act, according to legal analysis of the announcement reported by MLex.
A dependency problem
The rollout doubled as an acknowledgment of Europe’s reliance on American AI labs. EU digital chief Henna Virkkunen said advanced AI models can now be used to build cyberattack capabilities at a pace defenders struggle to match, according to Euronews. Because the EU has no frontier AI developers of its own, the “structured access” the plan describes largely means formalizing how European governments and critical-infrastructure operators tap into US-built systems for cybersecurity purposes. Finnish MEP Aura Salla told Euronews that the bloc’s core problem isn’t the AI models themselves but the computing infrastructure behind them, where Europe still lags.
The plan arrives as intelligence and security officials elsewhere have warned that AI-assisted attacks are beginning to outpace the ability of traditional defenses to keep up.