ENISA

ENISA is the European Union Agency for Cybersecurity. Established in 2004 as the European Network and Information Security Agency, it was renamed ENISA and reorganized to support the EU's cyber resilience. Its mandate is to help ensure a high level of network and information security across the EU, by providing expertise to EU institutions, member states, and EU citizens.

The agency's tasks include risk assessment, threat analysis, incident response coordination, and the development of cybersecurity guidance and best practices. It also contributes to the development of security standards, certification schemes, and awareness-raising. ENISA maintains cooperative networks with national authorities, CSIRTs, the private sector, and the research community to support information sharing and rapid response.

Since the EU Cybersecurity Act of 2019, ENISA has a permanent status, an expanded mandate, and a strengthened role in establishing the EU-wide cybersecurity certification framework. It coordinates cross-border exercises such as Cyber Europe, supports national authorities in policy implementation, and assists in building cyber defense capabilities across member states.

The agency is headquartered in Athens, Greece, and operates under the auspices of the European Commission, with a Management Board comprising representatives from member states and the Commission. Its Executive Director is appointed jointly by the EU institutions. ENISA collaborates with EU institutions, national CERTs, industry, and academia to strengthen cybersecurity across Europe.