## PART 1 ABOUT ENISA 

## 1.1 INTRODUCTION 

The European Union Agency for Cybersecurity (ENISA) was established by the European Parliament and the Council Regulation (EU) No 2019/881 of 17 April 2019 (OJ L 151/15, 07.06.2019). ENISA is actively contributing to European cybersecurity policy, in order to support Member States and European Union stakeholders to support a response to large-scale cyber incidents that take place across borders in cases where two or more EU Member States have been affected. This work also contributes to the proper functioning of the Digital Single Market. 

## 1.2 SCOPE 

The Agency shall assist the European Commission and EU Member States (EU MS), and in consequence cooperate with the business community, in order to help them to meet the requirements of network and information security, thereby ensuring the smooth functioning of the Internal Market. As described in ENISA regulation, one of the objectives of the agency is to assist the Union institutions, bodies, offices and agencies in developing policies in network and information security, so, including building expertise related to availability, authenticity, integrity and confidentiality of stored or transmitted data and the related services offered by or accessible via those networks and systems. For instance, the new ENISA regulation mentions the necessity to analyse current and emerging risks (and their components), stating: “ the Agency, in cooperation with Member States and, as appropriate, with statistical bodies and others, collects relevant information ”. In particular, under Art. 3, Tasks, d), iii), the new ENISA regulation states that ENISA should enable effective responses to information security risks and threats. 

ENISA supports the development and implementation of the European Union's policy and law on matters relating to network and information security (NIS) and assists Member States and European Union institutions, bodies and agencies in establishing and implementing vulnerability disclosure policies on a voluntary basis. 

Since 2019, following the bringing into force of the Cybersecurity Act (Regulation 2019/881), ENISA is tasked to prepare the ‘European cybersecurity certification schemes’ that serve as the basis for certification of products, processes and services that support the delivery of the Digital Single Market. The European Cybersecurity Act introduces processes that support the cybersecurity certification of ICT products, processes and services. In particular, it establishes EU wide rules and European schemes for cybersecurity certification of such ICT products, processes and services. 

## 1.3 OBJECTIVES 

The Agency’s objectives are as follows: 

 The Agency shall enhance the capabilities of the cybersecurity community including EU Member States to prevent, to address, and to respond to cybersecurity issues and threats. 

 The Agency shall provide assistance and deliver advice to the Commission and EU MS on issues related to cybersecurity falling within its competencies as set out in the Regulation. 

 Building on national and EU efforts, the Agency shall develop a high level of expertise. 

 The Agency shall use this expertise to stimulate broad cooperation between actors from the public and private sectors. 

 The Agency shall assist the Commission, in the technical preparatory work for updating and developing EU legislation in the field of cybersecurity. 

## 2. ADDITIONAL INFORMATION 

Further information about ENISA can be obtained on its website: www.enisa.europa.eu. 

