The European Union has published its Action Plan on Cybersecurity and Artificial Intelligence, outlining a coordinated approach for Member States, businesses, and public authorities. Building on existing legal frameworks like the AI Act, the plan focuses on three objectives: promoting safe and responsible use of advanced AI, reinforcing the EU's cybersecurity and resilience, and scaling up Europe's AI capabilities for cybersecurity. The Commission will strengthen capacity to evaluate AI models before market placement and collaborate with ENISA on a European Blueprint for secure access to advanced AI systems.
To enhance cybersecurity, the plan promotes implementation of legislation including the NIS2 Directive and Cyber Resilience Act. It encourages organizations to leverage AI, including open-source models, for faster vulnerability detection and improved attack prevention and response. A secure testing platform will help critical sectors such as energy, transport, health, finance, and public administration safely test and deploy AI solutions.
For technological leadership, the Commission will launch an EU Grand Challenge on AI for cybersecurity to foster innovative solutions among companies, researchers, and stakeholders. Investments will continue in sovereign AI capabilities through AI Factories and future Gigafactories, alongside encouragement of private investment. The Action Plan complements frameworks like DORA and the Cyber Solidarity Act, aiming to harness AI benefits while ensuring resilience against emerging threats through collaboration across institutions, industry, and international partners.
This initiative reflects a broader reaction to advancements like Anthropic’s Mythos, signaling European determination not to fall behind in the AI-driven cybersecurity landscape. Though bureaucratic in tone, it captures official recognition of the transformative and dual-use nature of AI technology.