  The European Union (EU) has been pursuing new cyber security policies in
recent years. This paper presents a short evaluation of four such policies. The
focus is on potential incoherency, meaning a lack of integration, divergence
between the member states, institutional dysfunction, and other related
problems that should be at least partially avoidable by sound policy-making.
According to the evaluation, the four policies have substantially increased the
complexity of the EU's cyber security framework. In addition, there are
potential problems with trust, divergence between industry sectors and
different technologies, bureaucratic conflicts, and technical issues, among
other things. With these insights, the paper not only contributes to the study
of EU policies but also advances the understanding of cyber security policies
in general.
