Publication date:December 8, 2025
The annual NIS Investments report presents the findings of a study conducted by ENISA to explore how cybersecurity policy
translates in practice across organisations in the EU and its effects on their investments, resources, and operations.
Data for this edition was collected from 1 080 professionals representing organisations1across the EU and the NIS sectors of
high criticality. The sample consisted mainly of large enterprises (83%), complemented by a smaller share of SMEs (17%) to
allow for comparative insights between organisations of different sizes.
