Cyber Threats to Public Administration as a Challenge to the Security of EU Countries
Purpose: The aim of this article is to identify the scale, structure and significance of cyber threats targeting the public administration of European Union member states in the context of national security and institutional resilience. Design/Methodology/Approach: A qualitative approach was adopted in this study, comprising a review of the relevant literature, an analysis of European Union legal acts and strategic documents (in particular the NIS2 Directive), and a secondary analysis of statistical data from reports by the European Union Agency for Cybersecurity (ENISA). The research question was formulated as follows: how do cyber threats directed against public administration affect the security and stability of the functioning of European Union member states? The research hypothesis posits that cyber threats to public administration – due to their scale, nature and link to hybrid threats – constitute a significant destabilising factor for the security of EU Member States, making the public administration sector a critical element of the national security system. Findings: The research findings indicate that public administration is among the most frequently targeted sectors in EU Member States. Cyber threats, such as DDoS attacks, data breaches and ransomware, lead to disruptions to the continuity of operations of public institutions, data loss and a decline in public trust. At the same time, these incidents are increasingly part of the logic of hybrid threats, also affecting the political and social dimensions of state functioning. Practical Implications: The findings point to the need to strengthen cybersecurity management systems in public administration, including the implementation of a risk-based approach, the development of incident response capabilities and the improvement of information security management systems (ISMS). The effective implementation of EU regulations and increased investment in organisational, technological and skills-based resources are also of key importance. Originality/Value: The article contributes to the academic discourse by providing a comprehensive, systemic approach to the issue of cyber threats in public administration, highlighting their significance not only from a technical perspective but also as a key element of national security and systemic resilience within the European Union.