Parliament to debate EU cybersecurity plan for hospitals, schools and power grids

The debate on 11 November follows a January Commission proposal to tighten the union's ICT supply chains and give ENISA a stronger role. No step in the procedure has yet been recorded.

The European Parliament will debate how to protect the networks that hospitals, schools and power grids use, on Wednesday 11 November at 15:00 in Brussels. The debate on resolution 2026/2948(RSP) follows a January Commission proposal to strengthen EU cybersecurity. As of 3 November, no step in the procedure had been recorded. The agenda slot is a plan, not a result, as the procedure tracker notes.

The Commission put the proposal forward on 20 January 2026, as part of a cybersecurity package with a revised Cybersecurity Act. The plan would tighten the security of the union's ICT supply chains. It would also give ENISA, the EU's cyber agency, a stronger role in helping member states handle threats.

The revised Cybersecurity Act that underpins the resolution sits with the industry committee, ITRE, where Marketa Gregorova of the Greens/EFA, from Czechia, acts as rapporteur, the member who drafts the Parliament's position.

The Parliament set the political frame for that work in September. On 16 September 2026 it adopted the Security and Defence Committee's report on hybrid warfare, written by Rasa Juknevičienė as rapporteur. In that report, the Parliament stated that Russia constitutes the primary security threat to the EU and its member states.

In July, the Council sanctioned nine Russian persons and four organisations for malicious cyber activities against the EU and its member states. Among them was LLC "Impuls" and its owner Evgeniy Viktorovich Bashev, a member of Unit 29155 of the GRU, Russia's military intelligence service. The Council said they provided technical and material support for the unit's cyberattacks against the EU.