Mr. Juhan Lepassaar:

Are we dealing with certain sectors or domains that makes it easy for the cyber attackers to misuse the situation? That is how I would define it. If we consider the overall economy of the EU, the agency focuses only on the critical sectors, not on everybody who operates in those critical sectors, only on the most important actors, namely, the essential service providers. The majority of the entities across the Internal Market are not essential service providers of the critical sectors. There is a major issue when it comes to the cybersecurity or small and medium sized enterprises or entities that fall outside the scope of the network information systems directive. That raises the question of how we ensure the level of resilience of not only the critical service providers is high but that the overall resilience of all entities that operate in the Internal Market will be increased.