This publication provides national competent authorities in Member States and EU policymakers, defenders, and service providers with an initial set of recommendations to support them in their respective roles towards developing the necessary…
ENISA Consolidated Annual Activity Report 2025
The 2025 Annual Activity Report of the European Union Agency for Cybersecurity (ENISA) sets out the achievements and progress in delivering the Agency’s 2025 work programme and strategy reflecting the dedication, excellence and strong…
SME CRA Survey Report
ENISA is is working on practical guidance, tools and support activities tailored to the realities and needs of smaller organisations, to help small and medium-sized enterprises (SMEs) understand and implement the Cyber Resilience Act (CRA). This…
SBOM Adoption State of Play - 2026
ENISA launched a survey at the end of 2025 to gather factual data on how organisations across industries and of varying sizes are approaching Software Bill of Materials (SBOM) adoption in response to the EU Cyber Resilience Act (CRA). This report…
Technical Competence Requirements for CRA Notified Bodies
The document focuses on high-level competences which will be required to perform conformity assessment activities, in particular the experience and training requirements for the personnel employed by a CAB wishing to be notified (CRA NB) –…
ENISA NIS360
This edition of the ENISA NIS360 report is the third to assess the cybersecurity maturity and criticality of all sectors of high criticality as identified under Annex I of the NIS2 directive. The assessment covers the entire ecosystem of a sector…
Your Perspective Matters: Join the NIS360 survey
ENISA launches a survey for both national authorities and high criticality entities under NIS2 in preparation of the next edition of the NIS360 report.
ENISA Technology and Innovation Radar Methodology
The purpose of this report is to present a comprehensive methodology for identifying and analysing technology signals relevant to the cybersecurity landscape. It outlines the key stages of the process and explains how these variables can be…
National Capabilities Assessment Framework 2.0
This report represents an updated version of ENISA's national capabilities assessment framework (NCAF). The framework aims to help Member States undertake a self-assessment of their level of maturity by assessing their National…
ICT & Security Coordinator
ENISA-TA-AST4-2026-11