The European Union (EU) has invested approximately €1.4 billion in strengthening its cybersecurity capabilities and protecting critical infrastructure from sophisticated cyberattacks, including those potentially backed by hostile states. However, questions are now being raised over the effectiveness of the initiative after an audit found that key components of the bloc’s early-warning cybersecurity system had not been adequately tested.
The findings were highlighted in a report released by the European Court of Auditors (ECA), which examined the EU’s cybersecurity efforts and incidents recorded between 2022 and 2025. According to the audit, there are significant gaps in the way the EU’s cybersecurity funding and capabilities are being monitored and evaluated. The report also raised concerns about whether the systems currently in place can reliably identify emerging threats and provide timely information to organizations responsible for protecting critical infrastructure.
The EU’s Cybersecurity Shield was designed to strengthen the bloc’s ability to detect, analyze and respond to cyber threats. Its broader objective is to ensure that organizations operating essential infrastructure can receive early warnings about malicious activity and take preventive measures before an attack causes significant disruption.
However, the ECA’s findings indicate that important elements of the early-warning framework have not yet demonstrated their capabilities sufficiently. Two hubs associated with the European cybersecurity alert system—ATHENA and ENSOC—were expected to contribute to the detection and exchange of information about cyber threats. Such information sharing is particularly important because companies and infrastructure operators need actionable intelligence to identify vulnerabilities, strengthen their defenses and respond quickly to attacks.
The audit also highlighted concerns regarding the monitoring of funds distributed to third parties. The European Cybersecurity Competence Centre’s oversight of the spending and implementation of these initiatives has come under scrutiny, raising questions about whether the substantial financial resources allocated to cybersecurity are producing the intended results.
The concerns are particularly significant because Europe’s critical infrastructure is increasingly dependent on interconnected digital systems. Energy networks, transportation systems, telecommunications, financial services and public-sector infrastructure can all become targets for cybercriminals or state-backed actors. A failure to detect and communicate threats quickly could therefore increase the potential impact of an attack.
The ECA’s findings do not necessarily mean that the EU’s cybersecurity infrastructure is incapable of protecting critical systems. Rather, they underline the need for stronger testing, oversight, coordination and information-sharing mechanisms.
As cyber threats continue to evolve, the effectiveness of any cybersecurity shield depends not only on the amount of money invested but also on how efficiently intelligence is collected, verified and distributed to organizations capable of acting on it. The audit therefore puts renewed attention on whether the EU can translate its substantial cybersecurity investment into a coordinated and demonstrably effective defense against emerging digital threats.
Join our LinkedIn group Information Security Community!
