European cybersecurity strategy faces internal detection challenges

European cybersecurity efforts are shifting toward a multi-layered regulatory architecture designed to enhance digital resilience. The Cyber Resilience Act (CRA) aims to shift responsibility toward manufacturers and software publishers by ensuring security is built into products from the design phase. This complements the NIS2 directive, which focuses on organizational operations, and DORA, which targets financial sector resilience.

However, experts warn of a critical gap in the effectiveness of information-sharing initiatives. While the European Court of Auditors has recommended an accelerated European alert system to improve coordination during major cyber incidents, Shane Barney, CISO of Keeper Security, argues that such a platform is only as effective as the data it receives.

A significant bottleneck exists in internal threat detection. Many organizations currently lack the capability to detect unauthorized access or credential abuse in real-time. For instance, a 2026 study by Keeper Security indicated that only 22% of French organizations could identify such breaches within minutes, with many others taking days or even being unable to quantify their reaction time.