JRC proposes a three-step response to hybrid threats

The European Commission’s Joint Research Centre, or JRC, presented a three-step strategy for hybrid threats on 23 October. For Hungarian institutions and digital service providers, recognising connected disruptions may be the practical lesson: an IT fault and a misleading message may need to be examined within a shared situational picture.

The JRC announcement brings advance preparation, active defence and reactive responses into one framework. The catalogue record for the research report, produced with Hybrid CoE, is dated 22 October. This is a scientific proposal; we infer no new Hungarian legal obligation from it.

In our practical illustration, an organisation could separately record the time of a system fault, the actual service interruption and claims circulating at the same time. It could then compare logs with customer-support reports. Coincidence in time is a starting point for investigation; identifying an actor or intention requires further evidence. This is an imagined procedure, not an account of an actual attack.

Our articles on the digital incident-reporting proposal and the ECB’s approach to cyber risk offer different institutional perspectives. The next substantive development would be a specific EU implementation instrument arising from the research framework. Meanwhile, assigning organisational responsibilities and information-sharing procedures can be handled separately from naming an attacker.