EU Adopts Revised Cyber Blueprint Framework

The overhaul of this strategic coordination framework for cyber crises was a priority for the 27 Member States, who approved it in under four months.

On June 6, 2025, the telecommunications ministers of the EU Member States, meeting as part of the European Council, adopted the revised version of the Cyber Blueprint. This non-binding strategic and operational framework ensures coordination between EU countries and stakeholders during “major cyber incidents or crises.” Presented in February 2025, the revised framework was adopted in less than four months—a notably swift process.

“In times of crisis, improvisation has no place—especially in today’s evolving and uncertain geopolitical landscape,” said Henna Virkkunen, Executive Vice-President of the European Commission for Technological Sovereignty, Security, and Democracy.

The updated Cyber Blueprint introduces a “systemic approach to the full crisis lifecycle,” from early detection to resolution and post-incident recovery. It outlines the specific roles of European agencies, national CSIRTs, EU-CyCLONe, CERT-EU, Europol, and other entities involved, under the coordination of ENISA, the EU Agency for Cybersecurity.