[Blog](/blog) Show links Resources [Blog](/blog) [Breaches](/breaches) [eBooks, reports, & more](/resources) [Events](/events) [News](/news) [Compliance and Regulations](/category/compliance-and-regulations) Show links Categories [Attack Surface Management](/category/attack-surface-management) [Company News](/category/company-news) [Compliance and Regulations](/category/compliance-and-regulations) [Cybersecurity](/category/cybersecurity) [Data Breaches](/category/data-breaches) [DevOps](/category/devops) [Human Cyber Risk](/category/human-cyber-risk) [Risks and Vulnerabilities](/category/risks-and-vulnerabilities) [Third-Party Risk Management](/category/third-party-risk-management) [Vendor Risk Management](/category/vendor-risk-management) [What is the EU Cyber Solidarity Act?](/blog/eu-cyber-solidarity-act) Publish date October 13, 2026 {x} minute read # What is the EU Cyber Solidarity Act? [Get a demo](/contact-sales) [Free trial](/demo) [Download the PDF guide](/resources/complete-guide-to-data-breaches) [Free trial](/demo) Written by [Kyle Chin](/team/kyle-chin) Cybersecurity Writer Kyle's work has been featured in law publications, academic institutions, and government bodies. Reviewed by [Kaushik Sen](/team/kaushik-sen) Chief Marketing Officer Kaushik has a background in software engineering, enterprise solution architecture, and data analytics. He brings a unique, data-driven perspective to cybersecurity education. Table of contents eBook A Complete Guide to Data Breaches Free resource ### A Complete Guide to Data Breaches Learn how to avoid a costly data breach with a comprehensive prevention strategy. [Download now](/resources/complete-guide-to-data-breaches) The [EU Cyber Solidarity Act](https://www.europarl.europa.eu/RegData/etudes/BRIE/2023/754614/EPRS_BRI\(2023\)754614_EN.pdf) is a new initiative that follows the European Union's latest efforts to build stronger cyber defenses against evolving [cybersecurity threats](https://www.upguard.com/blog/cyber-threat). This legislation introduces a new strategy for enhanced cooperation between EU member states and focuses on how EU nations can better prepare and respond to cyber incidents. The EU Cyber Solidarity Act follows a list of recent cyber legislations to help improve cyber resilience throughout Europe. The passing of other major cyber regulations, such as [NIS2](https://www.upguard.com/blog/what-is-nis2), [DORA](https://www.upguard.com/blog/what-is-the-digital-operational-resilience-act), the [EU Artificial Intelligence Act](https://www.upguard.com/blog/eu-artificial-intelligence-act), the [EU Cyber Resilience Act](https://www.upguard.com/blog/eu-cyber-resilience-act-cra), and the [EU Cybersecurity Certification Framework](https://www.upguard.com/blog/eu-cybersecurity-certification-framework), are all examples of the European Union aiming to secure European nations against digital threats and cybercrime. The CRA row in that list now has a readiness check: [CRA preparedness](/blog/cyber-resilience-act-preparedness-whos-ready-and-who-cant-be-reached) across hardware and software makers. This blog will explore what the EU Cyber Solidarity Act covers, how it affects current businesses, and review the key cyber initiatives that aim to protect EU nations against [cyber attacks](https://www.upguard.com/blog/cyber-attack). ## Overview of the EU Cyber Solidarity Act The [EU Cyber Solidarity Act](https://www.europarl.europa.eu/RegData/etudes/BRIE/2023/754614/EPRS_BRI\(2023\)754614_EN.pdf) was first proposed by the European Commission in April 2023 and outlines a coordinated approach to strengthen incident response and recovery across the EU. As of March 2024. the European Parliament and the EU Council reached a provisional agreement on the Act. The Cyber Solidary Act comprises many existing cyber framework objectives and aims to continue supporting existing cyber legislations while expanding on principles of: * Information sharing between public and private sectors * Situational awareness * Incident response and recovery * Crisis management frameworks * Cybersecurity operational cooperation The legislation directly supports other key Pan-European cyber initiatives that have been passed recently, most notably NIS2, aligning with its objectives on network and [information security](https://www.upguard.com/blog/information-security). ### Next steps Following the provisional agreement, the Parliament and the Council will need to agree on a formalized document, which needs to be agreed upon by representatives of the EU member states, and submitted for legal review before the formal adoption of the Act. Details regarding its implementation timeline are currently under discussion. Full enforcement will require extensive preparations and the establishment of new protocols across the EU. Upon submission of the final document in the Official Journal, the EU Cyber Solidarity Act will enter into force on the 20th day after its publication. ## Key objectives of the EU Cyber Solidarity Act The EU Cyber Solidarity Act outlines three main objectives: 1. Establishing a European cybersecurity shield 2. Establishing a cybersecurity emergency mechanism 3. Establishing a cybersecurity incident review mechanism ### European cybersecurity shield The EU Cyber Solidarity Act aims to build a “European cybersecurity shield” to improve the cyber threat detection, analysis, and response of EU nations. The European cyber shield enables the EU to research and develop advanced capabilities, such as advanced data analytics and artificial intelligence (AI), for detecting cyber threats through National and Cross-border Security Operations Centres (SOCs). This collaboration of national and cross-border cyber hubs serves as part of the initiative to build solidarity across EU nations. Each member state must designate a National SOC to participate in this program, to share analyses and information from cyber incidents with other National SOCS. Cross-border SOCs must consist of **at least three** National SOCs for collaborating in mutual assistance for threat detection and monitoring functions. The Cyber Solidarity Act outlines various requirements for Cross-border SOCs to share information with each other and also requires a high level of interoperability between Cross-border SOCs. The European cybersecurity shield also establishes the **European Cybersecurity Alert System**. This alert system aims to create a network that connects all member states, allowing for instant alerts and shared intel of ongoing cyber threats and vulnerabilities. Additionally, Cross-border SOCs must notify the following EU regulating bodies of any ongoing large-scale incidents: * EU CyCLONe (European Cyber Crisis Liaison Organization Network, established by NIS2) - EU-CSIRT (Cyber Security Incident Response Teams)** **network - ENISA (European Union Agency for Cybersecurity) - European Commission ### Cybersecurity emergency mechanism A cybersecurity emergency mechanism (or cyber emergency mechanism) is included in the Act to ensure that EU member states have adequate [incident response capabilities](https://www.upguard.com/blog/incident-response-plan) and preparedness actions against looming cyber threats and are prepared to deal with any security incident. Essentially, the cyber emergency mechanism looks to improve the [cyber resilience](https://www.upguard.com/blog/cyber-resilience) of member states and provide them with the necessary resources to respond, recover, and mitigate large-scale cybersecurity incidents. For this purpose, the cyber emergency mechanism establishes the new **EU Cybersecurity Reserve**, which will consist of trusted incident response service providers across the EU, with leading cyber professionals and technical resources ready to be used on short notice to support any member state under cyber attack, particularly organizations in critical sectors. To establish the EU Cyber Reserve, the Commission is tasked with collaborating with ENISA and implementing a process for support requests. All requests to the Cybersecurity Reserve are subject to review, with respect to the selection criteria and other procurement principles outlined by the Commission and ENISA. Third countries (countries outside of the EU) are also allowed to request the use of the Cybersecurity Reserve if they participate in the [Digital Europe Programme (DEP)](https://ec.europa.eu/info/funding-tenders/opportunities/docs/2021-2027/digital/guidance/list-3rd-country-participation_digital_en.pdf). ### Cybersecurity incident review mechanism The final objective of the EU Cyber Solidarity Act is to enable a **cybersecurity incident review mechanism**. Post-incident analysis is always crucial for improving future responses and allowing relevant stakeholders to learn from the incident and prevent its reoccurrence. All incident reviews will be carried out by ENISA to assess the threat, [vulnerability](https://www.upguard.com/blog/vulnerability), and response actions taken during the large-scale security incident. Results will be delivered to EU CyCLONe and the CSIRTs network to help them review and learn from the incident as well. This mechanism focuses on: * **Systematic review process:** Following a cyber incident, ENISA will conduct thorough reviews to evaluate the response effectiveness and identify any shortcomings, failures, and areas of improvement. * **Continuous improvement:** Based on the assessment, this review mechanism will issue guidance and recommendations for future action and potential policy adjustments to strengthen the EU's overall [cybersecurity posture](https://www.upguard.com/blog/security-posture). ## Funding through the Digital Europe Programme (DEP) Funding for the EU Cyber Solidarity Act will supported through funds from the Digital Europe Programme (DEP). These funds will be provided under the “Strategic Objective ‘Cybersecurity’” section of the DEP, with some fund reallocation through other Strategic Objectives under the DEP. The projected budget for the EU Cyber Solidary Act is expected to be around €842.8 million (or $906.996 million), which will largely support the creation of the EU Cybersecurity Reserve and the European Cybersecurity Alert System. ## Amendment to the EU Cybersecurity Act The EU Cyber Solidarity Act also includes an amendment to the EU Cybersecurity Act. The amendment proposes adopting European cybersecurity certification schemes for managed security services as part of the Cybersecurity Reserve initiative. This amendment allows for more trusted providers to operate under the Cybersecurity Reserve and builds trust in the system by requiring external providers to adhere to the certification frameworks. eBook A Complete Guide to Data Breaches Free resource ### A Complete Guide to Data Breaches Learn how to avoid a costly data breach with a comprehensive prevention strategy. [Download now](/resources/complete-guide-to-data-breaches) ## Related posts Learn more about the latest issues in cybersecurity. Compliance and Regulations #### [Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached](/blog/cyber-resilience-act-preparedness-whos-ready-and-who-cant-be-reached) We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much. [](/team/greg-pollock) [Greg Pollock](#) October 13, 2026 Human Cyber Risk #### [AI Assurance: The Third Head of Your AI Governance Watchdog](/blog/ai-governance-to-ai-assurance) AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now. [](/team/shane-moosa) [Shane Moosa](#) October 29, 2026 Compliance and Regulations #### [NIST compliance in 2026: A complete implementation guide](/blog/nist-compliance) NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party [](/team/edward-kost) [Edward Kost](#) January 5, 2026 Compliance and Regulations #### [Introducing UpGuard’s DPDP Act Security Questionnaire](/blog/upguards-dpdp-security-questionnaire) Discover the latest addition to UpGuard's industry-leading Questionnaire Library and learn how to achieve comprehensive DPDP compliance. [](/team/nicholas-sollitto) [Nicholas Sollitto](#) November 19, 2024 Compliance and Regulations #### [From NIS to NIS2: What Your Organization Needs to Know](/blog/nis-vs-nis2) Understanding the transition from NIS to NIS2 is crucial for protecting your organization. Explore the key changes and compliance steps in this blog. [](/team/leah-sadoian) [Leah Sadoian](#) July 4, 2025 Compliance and Regulations #### [How to Prepare for a Cyber Essentials Plus Audit](/blog/prepare-for-a-cyber-essentials-plus-audit) Learn more about the Cyber Essentials Plus independent assessment process, and steps your organization can take to prepare. [](/team/leah-sadoian) [Leah Sadoian](#) July 3, 2025 [All posts](/blog) Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)