A Practical Guide to Secure by Design and Default Principles for SMEs
Modern products with digital elements are increasingly expected to be secure by design and secure by default. However, many organisations, in particular small and medium…
Procurement guidelines for the cybersecurity of hospitals and healthcare providers
The procurement guidelines presented in this document are intended to help hospitals and healthcare providers integrate cybersecurity objectives into their procurement processes. Covering all phases of the procurement life cycle, they offer…
SME Cyber Resilience Maturity Assessment Model
The SME Cyber Resilience Maturity Assessment Model provides a structured approach for micro, small and medium-sized enterprises (SMEs) to evaluate and strengthen their overall cyber resilience, while taking into account the requirements of the…
ENISA scales up its role in the CVE Program
NATO Communications and Information Agency (NCIA), along with AI and cybersecurity innovator AISLE, join the Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs), under the ENISA Root.
ENISA’s view on Cybersecurity in the Frontier AI Era
This publication provides national competent authorities in Member States and EU policymakers, defenders, and service providers with an initial set of recommendations to support them in their respective roles towards developing the necessary…
CRA SRP guidance - AR Notification submission and update
This page provides information on the Assigned Representatives (AR) submission and update of notifications in the SRP. It is intended for AR users (Primary and Secondary/Backup).
CRA SRP guidance - AR User registration
This page provides information on the Assigned Representatives (AR) user registration in the SRP. It is intended for AR users (Primary and Secondary).
Frequently Asked Questions
All you need to know about the CRA Single Reporting Platform
ENISA Consolidated Annual Activity Report 2025
The 2025 Annual Activity Report of the European Union Agency for Cybersecurity (ENISA) sets out the achievements and progress in delivering the Agency’s 2025 work programme and strategy reflecting the dedication, excellence and strong…
SME CRA Survey Report
ENISA is is working on practical guidance, tools and support activities tailored to the realities and needs of smaller organisations, to help small and medium-sized enterprises (SMEs) understand and implement the Cyber Resilience Act (CRA). This…