Newsletters

On 13 February, the European Commission published a new updated report of the NIS Cooperation Group presenting an EU coordinated risk assessment of detection equipment used by law enforcement and security authorities at border crossing points, including ports and airports.

The assessment focuses on the cybersecurity risks linked to scanning and detection technologies deployed at EU external borders—such as cargo scanners and related inspection systems. Given the increasing digitalisation and connectivity of such equipment, the report examines potential vulnerabilities that could be exploited to disrupt operations, manipulate data, or compromise sensitive information.

Prepared under the framework of the NIS Directive, the coordinated assessment brings together Member States, the European Commission and ENISA. It highlights concerns related to software and remote connectivity, supply chain dependencies, including risks linked to third-country technology providers, and the integrity and confidentiality of customs and security data. The report also stresses the potential operational impact of cyber incidents on critical infrastructure, particularly ports and airports, where detection equipment plays a central role in ensuring both security and the smooth flow of goods.

Among the most prominent risks highlighted is the sector’s dependency on the limited number of manufacturers. The equipment detection market remains highly concentrated and largely reliant on predominantly non-EU suppliers. According to the assessment, such dependencies can increase exposure to supply chain disruptions, complicate procurement and maintenance processes, and reduce operational flexibility.

For logistics and freight transport, these structural constraints may translate into delays in equipment deployment, longer repair times and reduced resilience at critical entry and exit points. The assessment refers to instances where the procurement of customs control equipment was delayed due to limited availability, affecting inspection capacity and border fluidity.

While detection equipment is still often operated on a stand-alone basis by national authorities, the report notes that ongoing EU customs reforms and the development of the EU Customs Data Hub are expected to increase interconnectivity. In this context, the potential impact of cybersecurity incidents could become more significant, including spillover effects on transport, trade and enforcement activities.

The assessment further highlights fragmentation across Member States in risk evaluation methodologies, procurement strategies and security protocols. It calls for greater coordination at EU level, including harmonised cybersecurity requirements, reinforced procurement criteria and common approaches towards high-risk suppliers.

The full risk assessment report can be accessed here.