Firms supplying essential services – such as energy, transport, banking and health, or digital services – such as search engines and cloud services, will have to improve their ability to withstand cyber attacks under the first EU-wide rules on cybersecurity, approved by the European Parliament in July.