Security economics and European policy

Abstract

In September 2007, we were awarded a contract by the European Network and Information Security Agency (EN- ISA) to investigate failures in the market for secure electronic communications within the European Union, and come up with policy recommendations. In the process, we spoke to a large number of stakeholders, and held a consultative meeting in December 2007 in Brussels to present draft proposals, which established most had wide stakeholder support. The formal outcome of our work was a detailed report, "Security Economics and the Internal Market", published by ENISA in March 2008. This paper presents a much abridged version: in it, we present the recommendations we made, along with a summary of our reasoning. © 2009 Vieweg+Teubner | GWV Fachverlage GmbH, Wiesbaden.