•  
  •  
 

Author Biography

Dr. Andreea Nicoleta Dragomir is a university lecturer at the Faculty of Law, Lucian Blaga University of Sibiu. Her teaching and research activities focus on European Union law, security and defense policy, as well as cybersecurity governance and public-private security partnerships.

Dr. Daiana Maura Vesmaș is an associate professor in the Department of Public Law, Faculty of Law, Lucian Blaga University of Sibiu. Her research and teaching activities focus on administrative law, sustainable development, performance management, and public governance.

DOI

https://doi.org/10.5038/1944-0472.19.2.2619

Subject Area Keywords

Cybersecurity, Democracy and democatization, Development and security, Europe and EU, Governance and rule of law

Abstract

This article critically examines if the public–private partnerships (PPPs) help the European Union strengthen its cyber resilience, a challenge that is now closely tied to the Union’s broader strategic security goals. The discussion does not rely on one single angle. It moves back and forth between the legal side—looking at instruments such as the Network and Information Systems 2 (NIS2) Directive, the Cybersecurity Act, the proposed Cyber Resilience Act, and the Cyber Solidarity Act—and the lessons that come from practice. Examples include the dismantling of Operation Avalanche, the experience of the European Cyber Security Challenge, and the information-sharing efforts of the European Financial Information Sharing and Analysis Center (ISAC). These are not abstract cases: In several member states, incident detection became roughly a quarter faster and the volume of ransomware attacks fell once cooperation mechanisms were put in place. At the same time, nobody would claim the situation is solved. Trust between institutions and companies is still fragile, national responses remain fragmented, and the lack of trained professionals is felt everywhere. Complex interdependence is a useful concept here because it shows why PPPs cannot be treated as quick technical fixes. They are, instead, part of the structural foundations of cyber resilience in a digital environment. What the EU needs, therefore, is not only harmonized legislation and reliable incentives, but also workable ways to build and sustain trust among very different actors who often approach the problem from opposite perspectives.

Acknowledgements

We would like to thank the reviewers and the editorial team for their careful reading of the manuscript and for their constructive comments. Their observations were extremely helpful in improving the clarity, structure, and analytical focus of the article. We appreciate the time and attention dedicated to the evaluation process and the opportunity to revise and resubmit our work for publication.

Share

COinS