Internal Structure
As laid down in the EU regulation 460/2004 establishing ENISA, the bodies of the Agency comprise an Executive Director, a Management Board and a Permanent Stakeholders group.
Executive Director
The Executive Director is responsible for managing the Agency and performs his/her duties independently.
Management Board
The Management Board is entrusted with the necessary powers to:
- Establish the budget
- Verify its execution
- Adopt the appropriate financial rules
- Establish transparent working procedures for decision making by the Agency
- Approve the Agency's work programme
- Adopt its own rules of procedure and the Agency's internal rules of operation
- Appoint and remove the Executive Director
The Management Board is ensuring that the Agency carries out its tasks under conditions which enables it to serve in accordance with the founding Regulation.
Permanent Stakeholders' Group
The Executive Director has established a Permanent Stakeholders' Group composed of experts representing the relevant stakeholders, such as Information and Communication Technologies industry, consumer groups and academic experts in network and information security.
The Permanent Stakeholders' Group advises the Executive Director in the performance of his/her duties under this Regulation, in drawing up a proposal for the Agency's work programme and in ensuring communication with the relevant stakeholders on all issues related to the work programme.
Ad hoc Working Groups
The Executive Director establishes, in consultation with the Permanent Stakeholders’ Group, ad hoc Working Groups composed of experts. The ad hoc Working Groups are addressing specific technical and scientific matters.

