In addition to its service provision, EUSPA is responsible for ensuring that Europe’s GNSS signals are secure. Moreover, EUSPA provides security expertise also for other components of the Space Programme like GOVSATCOM and SSA/SST. EUSPA provides security supports to the European Commission also on other initiatives like the Euro Quantum Communication Infrastructure (EuroQCI) and Connectivity.
EUSPA covers the following aspects of the security life-cycle of the EU Space components:
- Operational security, security engineering and cybersecurity
- Security monitoring
- Security Accreditation
Operational security aims at ensuring that the systems in operation are compliant with the general security requirements established on the basis of the threat and risk analysis.
Security engineering and cybersecurity aims at ensuring the definition and implementation of the security requirements related to the services, the systems and their operations.
Security monitoring is ensured by the Galileo Security Monitoring Centre operated by the Agency.
Security Accreditation is ensured by the Security Accreditation Board.
The Security Department provides the cybersecurity and engineering competence for the Space components by establishing the security baseline, defining the security requirements related to the services (in particular for the Public Regulated Service), the systems and their operations as well as the user segment and ensuring their compliance.
The Department ensures Operational Security of EGNSS, performing risk and threat analysis and monitoring the compliance to the general security requirements of the Space components. This competence is also extended to the other components of the Space Programme.
The Security Department ensures the development of the Public Regulated User Segment by developing the relevant receivers and tools
Galileo Security Monitoring Centre
The Galileo Security Monitoring Centre (GSMC) is an integral part of the Galileo infrastructure based on two sites: one in Saint-Germain-en-Laye, near Paris (France) and one in San Martín de la Vega, Madrid (Spain).
The GSMC monitors and takes action regarding security threats, security alerts and the operational status of the Galileo system’s components. The GSMC is also responsible for managing access to the Public Regulated Service (PRS) and ensures that sensitive information relating to the use of the PRS is properly managed and protected. The Centre also provides PRS and Galileo security expertise and analysis.
In the event of a security threat to the European Union or to a Member State arising from the operation or use of the system, or in the event of a threat to the operation of the system itself, the Council shall issue instructions to the EUSPA, and the GSMC is responsible for implementing these instructions.
The role of the GSMC is expected to be extended also to other components of the Space Programme.