-
Malicious actions not necessarily focused on causing disruptions in TELECOM, but system failures still are
-
ENISA publishes its Annual Incidents report which gives the aggregated analysis of the security incidents causing severe outages in 2015.
Located in
News
/
ENISA News
-
ENISA Threat Landscape 2012
-
The ENISA Threat Landscape provides an overview of threats, together with current and emerging trends. It is based on publicly available data and provides an independent view on observed threats, threat agents and threat trends. Over 140 recent reports from security industry, networks of excellence, standardisation bodies and other independent institutes have been analysed.
Located in
Publications
-
Annual Incident Reports 2014
-
The report “Annual Incident reports 2014” provides an aggregated analysis of the security incidents in the European telecom sector in 2014 which caused severe outages. Most incidents reported to regulators and ENISA (137 incidents) involved fixed telephony and most incidents were caused by technical failures.
Located in
Publications
-
Annual Incident Reports 2013
-
The Annual Incidents report 2013 provides an aggregated analysis of the security incidents in 2013 which caused severe outages. Most incidents reported to regulators and ENISA involved mobile internet and mobile telephony connections.
Located in
Publications
-
Annual Incident Reports 2012
-
This report provides an overview of the process and an aggregated analysis of the 79 incident reports of severe outages of electronic communication networks or services which were reported by national regulators during 2012.
Located in
Publications
-
Annual Incident Report 2011
-
For the first time in the EU, in spring 2012, national reports about security incidents were provided to ENISA and the European Commission, under Article 13a of the Framework Directive (2009/140/EC). This is a new article in the EU legal framework for electronic communications. In this new ENISA document, we analyse the 51 received incident reports, dealing with severe outages of electronic communication networks or services.
ENISA will publish a similar overview and analysis, yearly, following subsequent rounds of annual summary reporting by the NRAs in the EU Member States. The next report will be published in spring 2013, and will summarize and analyse incidents that occurred in 2012.
Located in
Publications
-
Good Practice Guide on Incident Reporting
-
Given strong commitment by the EU institutions and the Member States to the resilience of public communications networks, ENISA was asked to help Member States and EU institutions to identify good practices in incident reporting schemes.
This document addresses many of the issues that Member States will face as they debate, take stock, establish, launch, develop and harmonize their incident reporting systems at national level.
The report discusses schemes for reporting incidents that may harm or threaten the resilience and security of public eCommunication networks. It examines the whole lifecycle of a reporting scheme, from the first steps in designing the scheme, through engaging the constituency’s cooperation, setting the reporting procedures, and then management and improvement of the scheme.
Located in
Publications
-
Guideline on Security measures for Article 4 and Article 13a
-
The Technical Guideline on Security Measures for Article 4 and Article 13a gives guidance to national competent authorities about the supervision of security measures in Article 13a of the Framework Directive (2009/140/EC) and Article 4 of the e-Privacy directive (2002/58/EC). In particular it lists security measures national competent authorities should take into account when evaluating the compliance of public communications network and service providers with paragraph 1 of Article 4 and paragraph 1 and 2 of Article 13a.
Located in
Publications
-
Technical Guideline on Threats and Assets
-
The Technical Guideline on Threats and Assets provides National Regulatory Authorities (NRAs) with a glossary of terms to communicate about the most significant threats and network assets involved in disruptions in electronic communications networks and services. The threats and assets described in this report are based on past incidents, as reported by the NRAs to ENISA and the European Commission.
Located in
Publications
-
Proposal for One Security Framework for Articles 4 and 13a
-
There are two pieces of EU legislation which explicitly mention security measures in the telecom sector: Article 4 of the e-Privacy directive asks providers to take security measures to protect security of personal data processing. Article 13a of the Framework directive asks providers to take security measures to protect security of the provided networks and services. It has been argued there is an 80% overlap between the two articles.
ENISA would like to leverage this overlap and in this way optimize the implementation of both articles across the EU and where possible achieve harmonization between the implementation of Article 13a and Article 4. We look forward to discussing and developing this proposal further with all competent authorities (on Article 13a and 4), including DPAs and NRAs.
Located in
Publications