Member States and Commission test collective cybersecurity crisis response

Today, senior cybersecurity officials from EU Member States and the Commission took part in the 2025 edition of the 'Blueprint Operational Level Exercise' (BlueOLEx), marking the first exercise since the adoption of the new EU Cyber Blueprint that clarifies roles and responsibilities in a crisis.

Hosted by the Cypriot authorities with the support of EU agency for cybersecurity ENISA, this year's BlueOLEx simulates large-scale cyber incidents impacting one or more of the EU's most critical sectors.

The exercise tests how the EU-CyCLONe - the network of Member States' cyber liaison authorities - and the Commission would prepare for and respond to such scenarios. Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy, said:

"When it comes to cybersecurity, we have to expect the unexpected and be ready to work together in the face of common threats. BlueOLEx is an opportunity to see how our crisis management procedures should work in lockstep at EU and national level."

The lessons learned from these exercises will feed into the EU's wider Preparedness Union strategy, enhancing coordinated response to multi-dimensional and multi-sector threats. During the event organised by ENISA, participants engaged in scenario-based exercises, discussions on strategic partnerships, and refined incident response methodologies, further underscoring the EU's dedication to cybersecurity readiness. This initiative contributes to a secure digital environment for EU citizens and fosters collaboration to shield against evolving cyber threats.

Read more information on the EU Cybersecurity Strategy resources and EU cybersecurity policies.

Related topics