EU Matrix Atlas › Policy topic
EU Policy Topic · ATLAS

Scope of EU cybersecurity obligations

Score 0-20: Statement explicitly promotes "applying cybersecurity obligations to all public and private organisations". OR, uses emotional language or criticism to enhance the sense of urgency or threat to sway views in this direction.
Score 21-40: Proposal subtly, discretely or indirectly favours "applying cybersecurity obligations to all public and private organisations" and does not use emotional language.
Score 41-60: Statements that are roughly neutral, whose bias on either side is roughly insignificant.
Score 61-80: Proposal subtly, discretely or indirectly favours "limiting cybersecurity obligations to critical infrastructure and high-risk sectors to avoid red tape and costs for non-critical organisations" without using emotional language.
Score 81-100: Proposal explicitly promotes "limiting cybersecurity obligations to critical infrastructure and high-risk sectors to avoid red tape and costs for non-critical organisations". OR, uses emotional language or criticism to enhance the sense of urgency or threat to sway views in this direction.

How positions are measured

One poleApply broad cybersecurity obligations: comprehensive mandatory security requirements (NIS2-style) across public and private organisations, with strict incident-reporting and penalties, to protect the whole digital ecosystem.
Other poleLimit cybersecurity obligations: focus mandatory requirements on critical infrastructure and high-risk sectors, avoid red tape and costs for non-critical and smaller organisations, applying risk-based and proportionate rules.

Legislative files on this topic (3)

See where policymakers stand on this topic →
© EU Matrix · atlas.eumatrix.app · Sign in for the full analysis: where each MEP, group and government stands on this axis.