Publications

Featured publications

NIS Investments 2025

The annual NIS Investments report presents the findings of a study conducted by ENISA to explore how cybersecurity policy translates in practice across organisations in the EU and its effects on their investments, resources, and operations.

ENISA Threat Landscape 2025

Through a more threat-centric approach and further contextual analysis, this latest edition of the ENISA Threat Landscape analyses 4875 incidents over a period spanning from 1 July 2024 to 30 June 2025. At its core, this report provides an…

NIS2 Technical Implementation Guidance

This report provides technical guidance to support the implementation of the NIS2 Directive for several types of entities in the NIS2 digital infrastructure, ICT service management and digital providers sectors. The cybersecurity requirements for…

All publications

Publish Date

Emerging and Future Risks Executable Workflow, UML Description

This document refines the contents of the Emerging Risk Workflow and provides details that allow for the implementation (both manual and automated) of the EFR process. It is based on UML specification.

Technology-induced challenges in Privacy & Data Protection in Europe

The ENISA Working Group on Privacy & Technology has been established to analyse the problems posed by these technology trends and the implications for the current EU legal framework. The main task of the Working Group is to propose actions to…

Technology-induced challenges in Privacy & Data Protection in Europe [French Version]

In this page you will find the French version of the report.

Technology-induced challenges in Privacy & Data Protection in Europe [German Version]

In this page you will find the German version of the report.

Technology-induced challenges in Privacy & Data Protection in Europe [Spanish Version]

In this page you will find the Spanish version of the report.

Emerging and Future Risks Workflow

This document provides an initial description of the activities, steps, information flow and roles involved in the scenario based assessment process of Emerging Risk.

Security Economics and the Internal Market

Network and information security are of significant and growing economic importance.
The direct cost to Europe of protective measures and electronic fraud is measured in
billions of euros; and growing public concerns about information…