Cybersecurity Skills

ENISA is supporting the EU Member States since 2012 to develop, implement and evaluate their National Cyber Security Strategies (NCSS). Since 2017, all EU Member States have published their own NCSS.

Cybersecurity Skills

Cyber security is a continuously changing topic that requires constant training and education. Promoting and developing education and training on cybersecurity and cybersecurity skills development, aimed at citizens, stakeholders and entities is also a requirement of NIS2 Directive that needs to be incorporated into the National Strategies of the EU MS. The development of cybersecurity skills refers to the process of acquiring and enhancing the knowledge, abilities, and expertise needed to protect networks, systems, and data from cyber threats. This involves training individuals in various technical, operational, and strategic areas of cybersecurity to ensure they can effectively prevent, detect, and respond to security incidents.
Based on the European Commission communication on Cybersecurity Skills Academy, Member States should adopt, as part of their national cybersecurity strategies, specific measures in view of mitigating the cybersecurity skills shortage, identifying and better channeling efforts to close the skills gaps and ultimately ensuring a proper implementation of their obligations under the NIS2 Directive.

Austria flag
Austria
Belgium flag
Belgium
Bulgaria flag
Bulgaria
Croatia flag
Croatia
Cyprus flag
Cyprus
Czech Republic flag
Czech Republic
Denmark flag
Denmark
Estonia flag
Estonia
Finland flag
Finland
France flag
France
Germany flag
Germany
Greece flag
Greece
Hungary flag
Hungary
Iceland flag
Iceland
Ireland flag
Ireland
Italy flag
Italy
Latvia flag
Latvia
Liechtenstein flag
Liechtenstein
Lithuania flag
Lithuania
Luxembourg flag
Luxembourg
Malta flag
Malta
Netherlands flag
Netherlands
Norway flag
Norway
Poland flag
Poland
Portugal flag
Portugal
Romania flag
Romania
Slovakia flag
Slovakia
Slovenia flag
Slovenia
Spain flag
Spain
Sweden flag
Sweden
Switzerland flag
Switzerland
Belgium flag
Belgium

Cyber Security Coalition Initiatives: An independent tripartite platform (industry, government, academia) that drives senior-level skills development through 12 cross-sector working groups, peer-to-peer knowledge sharing, and the annual National Cyber Survey.

Sources: https://cybersecuritycoalition.be/

CyberSecurity Challenge Belgium: A nationwide talent pipeline that identifies high-potential students through a multi-stage competition (online qualifiers, bootcamps, and a national final). Winners receive specialized training and mentorship to represent Belgium at the European Cybersecurity Challenge (ECSC), directly addressing the entry-level skills gap by fast-tracking students into professional roles.

Sources: https://www.cybersecuritychallenge.be/

SafeOnWeb and CyberFundamentals (CyFun®): A dual-platform approach where SafeOnWeb provides accessible awareness campaigns and free training modules for citizens and SMEs, while CyFun® offers a structured, risk-based framework helping organizations assess their maturity and upskill staff to meet NIS2 compliance.

Sources: https://atwork.safeonweb.be/tools-resources/cyberfundamentals-framework

Croatia flag
Croatia

National Coordination Centre (NCC-HR): Croatia's national node in the EU cybersecurity competence network, designated to CARNET, tasked with building cybersecurity capacity and competences. Under the DEP-funded "Deployment of NCC-HR" project, it establishes a Cybersecurity Competence Community, delivers trainings to strengthen capacity and competences, runs "Cyber Meetups" across Croatian counties for SMEs, institutions and academia, and provides funding/support for innovation projects (Cascade Funding). 

Sources: https://nks.hr/ 

"Increasing the number of ICT experts" measure and STEM/ICT scholarships (Digital Croatia Strategy): Croatia's national workforce-supply measure under the Digital Croatia Strategy 2032, addressing the shortage of digital/ICT specialists with a ~EUR 93m measure to increase ICT experts on the labour market plus STEM and ICT scholarships to raise the number of ICT undergraduates and graduates. The national Digital Decade roadmap explicitly calls for more professional training in computing and information sciences "with particular attention to increasing the number of cyber security experts". 

Sources: https://mpudt.gov.hr/digitalna-transformacija/strategija-digitalne-hrvatske-za-razdoblje-do-2032/29168 
https://mpudt.gov.hr/UserDocsImages/RDD/SDURDD-dokumenti/Strategija_Digitalne_Hrvatske_final_v1_EN.pdf 

Denmark flag
Denmark

CyberSkills Denmark: CyberSkills is a national cybersecurity community that connects young people interested in cybersecurity, provides learning resources, career guidance, educational material and networking opportunities.

Sources: https://www.cyberskills.dk/

Open-source search engine (CyberEd.dk): CyberEd.dk is a cybersecurity education search platform supported by NCC-DK that aggregates more than 500 cybersecurity courses and educational programmes for businesses, students and cybersecurity professionals.

Sources: https://www.cybered.dk/
https://ncc-dk.dk/cybered-dk-samler-over-500-cybersikkerhedskurser/

Estonia flag
Estonia

MSc in Cybersecurity (TalTech and the University of Tartu): A two-year, 120 ECTS, English-taught joint master's programme in Tallinn, offering Cybersecurity and Digital Forensics tracks. The programme involves practitioners from industry, law enforcement, CERT-EE and NATO CCDCOE, and graduates receive a joint degree from TalTech and the University of Tartu.

Sources: https://taltech.ee/en/cyber-msc

CyberSpike (KüberNaaskel) and youth competitions: CyberSpike combines an online qualification round with a live final and supports the selection of Estonia's team for the European Cybersecurity Challenge. Related school competitions, including KüberPähkel and KüberPuuring, introduce thousands of younger students to cybersecurity each year and create a pathway to more advanced competitions. The CyberWizards programme provides a dedicated cybersecurity learning and competition format for girls.

Sources: https://taltech.ee/en/cyberspike
https://ctftech.com/
https://www.ria.ee/en/cyberwizards

RIA cyber reserve (küberreserv): RIA maintains a three-tier reserve of cybersecurity experts for serious incidents. The first tier consists of RIA specialists, the second draws on experts from state IT organisations, and the third is provided by the Estonian Defence League Cyber Unit. The reserve is activated when a critical service is severely disrupted and the affected organisation cannot manage the incident alone. It is regularly tested through national exercises. 

Sources: https://www.ria.ee/en/estonias-cybersecurity-starts-you

Kübertest e-learning and national Cybersecurity Skills Strategy: Kübertest is an online training and assessment tool that helps public officials, vital service providers, businesses and citizens improve their cybersecurity knowledge. The platform was launched by RIA in 2023 and more than 21,000 people, reportedly, used it during its first two years. Estonia's Cybersecurity Skills Strategy complements this tool by assessing the national workforce gap, estimated at about 50 percent, and setting priorities for education and professional development.

Sources: https://www.ria.ee/en/cyber-security/cyberspace-analysis-and-prevention

Finland flag
Finland

Cybersecurity as a civic skill for all age groups: Integrating education on cyber security skills into all training, as a continuous and integral part of the training programmes rather than a separate entity.

Sources: https://www.oph.fi/fi/kyberturvallisuus

Finnish Higher Education Network: Finland launched a formal national project involving nine leading Finnish universities to pool resources, standardize curricula, and address the skills gap systematically.

Sources: https://www.jyu.fi/en/projects/national-cybersecurity-continuous-learning-cooperation-network
https://jyx.jyu.fi/bitstreams/4e41ed1b-f651-4273-9ece-d1fa7d691c47/download

Germany flag
Germany

DsiN Digital Driving Licence (DiFü – Digitalführerschein): A free digital-skills training and certification scheme run by Deutschland sicher im Netz e.V. (DsiN), the non-profit association for digital enlightenment operating under the patronage of the Federal Ministry of the Interior (BMI). Through three progressive proficiency levels spanning six core subject modules citizens of all ages can test and build their everyday digital and IT-security competence and obtain a certificate.

Sources: https://difue.de/en/

https://difue.de/

Management of cyber risks handbook for company leadership (Management von Cyber-Risiken): It is a practical playbook for company executives that explains how cyber security should be managed as a core business risk through six core principles. Adapted from international frameworks, this guide helps corporate leadership structure security budgets and fulfill regulatory obligations.

Sources: https://www.allianz-fuer-cybersicherheit.de/Webs/ACS/DE/Informationen-und-Empfehlungen/Management/management_node.html 
https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/NACD/onepager_manangement-handbuch_en.pdf?__blob=publicationFile&v=4
https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/NACD/onepager_manangement-handbuch_de.pdf?__blob=publicationFile&v=5 

Hungary flag
Hungary

National Coordination Centre Hungary (NCC HU): Hungary's node in the EU cybersecurity competence network, operated by the Special Service for National Security (SSNS). The National Coordination Centre Hungary (NCC HU) supports the Hungarian ecosystem's competence and capacity building, coordinates access to ECCC / Digital Europe / Horizon Europe funding, and runs the free-to-join Hungarian Cybersecurity Competence Community connecting companies, start-ups/SMEs, research institutes, universities, public bodies and civil society. It provides networking, national and European events, R&D/innovation collaboration and funding-opportunity information, explicitly including the development of cybersecurity professionals and talent.

Sources: https://ncc.gov.hu/en/
https://ncc.gov.hu/hirek/kiberkozosseg-jelentkezes/
https://ncc.gov.hu/en/news/application-cybersecurity-competence-community/

National Cybersecurity Skills Strategy & National Cyber Security Centre of Hungary (NCSC HU) training-landscape analysis: Hungary's strategic response to the cyber skills gap. A national Cybersecurity Skills Strategy for Hungary (2025) was developed by IVSZ (Hungarian ICT association) and Ludovika University of Public Service (NKE) under the EU CyberHubs project, based on labour-market and skills-mismatch analysis; it sets priorities for secondary-to-career pathways, aligning training with industry, supporting career transitions and workforce diversity. Complementing it, the National Cyber Security Centre of Hungary (NCSC HU), the national CSIRT, published an analysis of Hungary's school-system cybersecurity training offer, mapping BSc/MSc and specialist programmes to the ENISA European Cybersecurity Skills Framework (ECSF) role profiles to help decision-makers, providers, applicants and employers.

Sources: https://nki.gov.hu/it-biztonsag/elemzesek/kiberbiztonsagi-kepzesek-magyarorszagon/
https://cyberhubs.eu/wp-content/uploads/2025/02/Final-version-D2.3-Cybersecurity-skills-strategies-Hungary.pdf
https://nki.gov.hu/wp-content/uploads/2026/01/Kiberbiztonsagi-kepzesek-Magyarorszagon.pdf

Liechtenstein flag
Liechtenstein

Cybercheck Liechtenstein Workshops, Webinars and Cybersecurity Information for Businesses: Cybercheck Liechtenstein provides businesses, particularly SMEs, with cybersecurity information, practical materials and access to workshops, webinars and networking events.

Sources: https://www.cybercheck.li/it-sicherheit-tipps-fachbeitraege/

Malta flag
Malta

Cybersecurity Skilling Programme: The programme offers individuals diverse upskilling opportunities in cybersecurity through a series of specialised and generic training courses. These courses are scheduled at different time windows, providing flexibility for participants to engage based on their availability and preferences. Program duration: 2023 -2025. 

Sources: https://ncc-mita.gov.mt/the-cybersecurity-skilling-programme/ 

CYBER ROOT: CYBER ROOT is Malta's national cybersecurity conference. This flagship conference brings together internationally acclaimed speakers and locally respected experts to share cutting-edge insights, strategies and real-world experiences shaping the future of cybersecurity. 

Sources: https://mita.gov.mt/defending-the-digital-future-cyber-root-2025-takes-centre-stage-2/ 
https://cybersecurity-centre.europa.eu/events/cyber-root-conference-malta-29-october-2025-2025-10-29_en 

National Cybersecurity Coordination Centre (NCC Malta): The National Cybersecurity Coordination Centre (NCC Malta) is responsible for building and maintaining Malta's cybersecurity community. It organises activities, promotes participation of industry, academia, research organisations and civil society in cybersecurity initiatives, and supports national cybersecurity capacity building and skills development. 

Sources: https://ncc-mita.gov.mt/about-us/ 

National Cyber Security Challenge (NCSC): The National Cyber Security Challenge is a national cybersecurity competition that aims to identify, develop and promote cybersecurity talent in Malta. 

Sources: https://ncc-mita.gov.mt/ncsc-2026/ 

SOC Analyst Training: The Security Operations Centre (SOC) Analyst Training is a specialised course delivered under the MITA-NCC Cybersecurity Skilling Programme, combining foundational cybersecurity theory with practical, hands-on sessions led by experienced trainers. The course follows a progressive structure consisting of a psychometric pre-assessment, a three-week part-time Foundational Course with checkpoint assessments and a certified summative assessment, and an Advanced Course for the highest-performing candidates. It is open to Maltese nationals and residents aged 16 and over who are fluent in English and hold an MQF Level 3 qualification or above, or at least one year of experience in an IT role. The programme supports the development of skills required to operate state-of-the-art Security Operation Centres. 

Sources: https://mita.gov.mt/the-soc-analyst-training-a-pathway-to-advanced-cybersecurity-skills/ 

https://ncc-mita.gov.mt/the-cybersecurity-skilling-programme/ 

https://ncc-mita.gov.mt/articles/building-adequate-skills-to-man-state-of-the-art-security-operation-centres/ 

Get Qualified: Get Qualified is a national scheme supporting the personal and professional development of individuals seeking to enhance their knowledge through certifications and qualifications required by industry, including cybersecurity certifications. Successful applicants receive a tax credit of up to 70% on registration fees, tuition fees and educational services, educational and ancillary services, and examination fees. Additional support is granted to individuals attaining higher education qualifications and specialising in STEM subjects. The scheme is administered by Malta Enterprise and is open to persons liable to tax in Malta. 

Sources: https://www.servizz.gov.mt/en/services/web-02016 

 

Netherlands flag
Netherlands

Cybersecurity Learning Communities (CYRCLE): A national programme connecting education, research, business and public partners to strengthen SME cyber resilience while developing new cybersecurity talent. In 2026, CYRCLE received €1 million and is implemented through four regional clusters led by five universities of applied sciences.

Source: https://regieorgaan-sia.nl/financiering/cybersecurity-learning-communities/ 

Mijn cyberweerbare zaak (MCZ): The RVO subsidy supported small businesses and self-employed entrepreneurs to implement practical cybersecurity measures, including awareness training. The 2025 round reimbursed 50% of eligible costs up to €1,250 and closed on 31 October 2025; the scheme is currently closed. 

Source: https://www.rvo.nl/subsidies-financiering/mcz 

Poland flag
Poland

CyberPL / Cyberbezpieczny Rząd workforce training: Under the CyberPL investment, the Cyberbezpieczny Rząd grant programme supports cybersecurity training for staff of participating government institutions alongside security audits and investment in modern cyber-defence infrastructure. This strengthens practical cybersecurity capabilities within public administration.

Sources: https://www.gov.pl/web/premier/cyber-pl

NASK Cybersecurity Centre specialist training facility: The planned NASK Cybersecurity Centre includes a model cybersecurity training centre and infrastructure for specialist and upskilling courses. It is intended to prepare specialists to defend effectively against cyberattacks, but the facility is still being developed and is not yet operational implementation evidence.

Sources: https://www.gov.pl/web/baza-wiedzy/nowoczesne-centrum-cyberbezpieczenstwa-nask
https://www.gov.pl/web/cyfryzacja

Portugal flag
Portugal

Cybersecurity Competencies Framework: The Portuguese National Cybersecurity Centre (CNCS) provides a Cybersecurity Competencies Framework aimed at all those interested in the training and hiring of professionals, among other areas where the identification of cybersecurity skills is important. 

Sources: https://www.cncs.gov.pt/en/referencial-de-competencias/ 
https://www.cncs.gov.pt/pt/referencial-de-competencias/ 
https://www.cncs.gov.pt/docs/cybersecurity-competencies-framework-cncs.pdf 

C-Academy: The C-Academy is an advanced training programme in cybersecurity for public administration and the private sector developed by the Portuguese National Cybersecurity Centre (CNCS) following the Recovery and Resilience Plan.  The C-Academy's training offer, developed on the basis of the Cybersecurity Competency Framework, includes 44 courses, distributed at different levels of demand and in online, in person or mixed formats, covering various areas relevant to the current and future cybersecurity landscape, such as engineering, management, law, among others. 

Sources: https://www.cncs.gov.pt/en/c-academy/ 
https://www.c-academy.pt/CNCS/web/home/ 

https://www.cncs.gov.pt/pt/cursos-c-academy/  

Cybersecurity Challenge PT: The initiative "Cyber Security Challenge PT" results from a close cooperation between the National Cyber Security Centre and partners from education, academia, and the cyber security community. This initiative also counts on the partnership of the Safer Internet Centre Consortium.  This initiative aims to train and educate the population's youngest age groups by stimulating and reinforcing digital literacy and digital skills in all education levels and lifelong learning. Thus, the initiative aims to identify young national talents and promote a professional career in the area of Cyber Security. This initiative also selects the Portuguese team competing in the European Cybersecurity Challenge. 

Sources: https://www.cncs.gov.pt/en/cybersecurity-challenge-pt/ 
https://cybersecuritychallenge.pt/ 

E-learning Courses: National Cybersecurity Centre (CNCS) offers a set of courses in e-learning format, the so-called MOOC (Massive Open Online Courses), which allow any citizen to acquire skills in cybersecurity, free of charge. These courses, available on the NAU platform, cover various topics, such as the main threats in cyberspace, the care to be taken when using digital technologies, the problem of misinformation or what to do to consume online safely, and social networks.  

C-Academy also offers several e-learning courses for experts, mainly related to NIS 2, to help organizations implement NIS 2 obligations. 

Sources: https://cncs.gov.pt/en/e-learning/ 
https://cncs.gov.pt/pt/cursos-e-learning/ 

Slovakia flag
Slovakia

National Cybersecurity Game (CyberGame): CyberGame is a national cybersecurity competition and skills development programme designed to identify and develop cybersecurity talent. Top  performers may progress to the Slovak Cyber Team representing Slovakia in the European Cyber Security Challenge.

Sources: https://cyberteam.sk/
https://cybergame.sk/

Cybersecurity Competence and Certification Centre (Kompetenčné a certifikačné centrum kybernetickej bezpečnosti, KCCKB): KCCKB provides cybersecurity courses, workshops, webinars and professional development programmes for public authorities, companies and cybersecurity professionals. Training includes risk management, incident management, cybersecurity auditing, AI security, secure development, business continuity and post quantum cryptography.

Sources: https://cybercompetence.sk/

Funding Programme for Cybersecurity Education and Professional Training: The National Security Authority (hereinafter referred to as the “NBÚ”)  provides financial support for cybersecurity education and specialist training initiatives. Identified funding programmes support developer training, cybersecurity certification expertise and cybersecurity assessment skills, helping increase national cybersecurity capacity. Funding is provided through national and Digital Europe supported initiatives.

Sources: https://ncca.nbu.gov.sk/nbu-vyhlasuje-vyzvu-na-podporu-vzdelavacich-programov-v-oblasti-certifikacie-a-hodnotenia-podla-eucc/
https://ncca.nbu.gov.sk/

Slovenia flag
Slovenia

National Cybersecurity Coordination Centre (NCC-SI) (Nacionalni koordinacijski center za kibernetsko varnost): NCC-SI acts as Slovenia’s national hub for cybersecurity capacity building and skills development. It organises training courses, exercises, educational programmes and awareness events, promotes cybersecurity careers, supports human resource development and facilitates cooperation between academia, industry and the public sector. The centre also supports research and innovation projects and knowledge sharing across the national cybersecurity ecosystem. 

Sources: https://ncc.si/ 

https://www.gov.si/en/state-authorities/government-offices/government-information-security-office/about-the-office/national-cybersecurity-coordination-center/ 

Strengthening the Cybersecurity Ecosystem in Slovenia (SECIS) (Krepitev ekosistema kibernetske varnosti v Sloveniji – SECIS): SECIS is a multi year programme designed to strengthen cybersecurity knowledge, skills and capacity building through NCC-SI. The project includes training courses, workshops, practical tools for SMEs, development of knowledge resources and support for cybersecurity skills across critical infrastructure value chains. It also aims to create a central digital platform containing educational resources and cybersecurity guidance. 

Sources: https://www.gov.si/zbirke/projekti-in-programi/krepitev-ekosistema-kibernetske-varnosti-v-sloveniji-secis/ 

Information Security E-learning Programme (Informacijska varnost – e-usposabljanje): This operational e-learning programme is available for public sector employees seeking to improve information security knowledge. The training covers password security, multi factor authentication, phishing, social engineering, malware, incident response, legal requirements and security practices within public administration. Participants complete online modules and a final assessment and receive a certificate upon successful completion. 

Sources: https://ua.gov.si/aktivnosti/detajli?ID=92cf632f-c3b1-ed11-9c92-005056818ee6&Tag=459,576 

SI-CERT Cybersecurity Webinar Series (Serija spletnih seminarjev): SI-CERT operates a continuing programme of free cybersecurity webinars aimed at organisations and professionals. Topics include cyber incident reporting, phishing, advanced attacks against companies, data breach management, cryptocurrency fraud, cyber hygiene and other practical cybersecurity topics. Recordings are publicly available and intended for security managers, compliance officers, data protection officers and IT staff. 

Sources: https://www.cert.si/serija-spletnih-seminarjev/ 

Safe.si Awareness and Education Programme (Safe.si – Točka osveščanja o varni rabi interneta): Safe.si provides cybersecurity and digital safety education for children, teenagers, parents, teachers and social workers. The programme offers workshops, training sessions, awareness campaigns, educational materials, videos, online learning resources and participation in Safer Internet Day activities. It forms part of Slovenia’s broader effort to develop digital and cybersecurity skills from an early age. 

Sources: https://safe.si/english/contact 

Spain flag
Spain

INCIBE advanced training and cybersecurity talent development: INCIBE implements complementary skills-development pathways for professionals and emerging talent. The Cybersecurity Summer BootCamp provides advanced technical, operational and legal training for CSIRT personnel, law-enforcement and judicial professionals, policymakers and other public-sector specialists. Separately, INCIBE also operates Spain’s national pathway for the European Cybersecurity Challenge by running technical selection, training and mentoring and preparing the Spanish team. Together, these mechanisms strengthen the existing workforce and identify and develop young cybersecurity talent. 

Sources: https://www.incibe.es/en/events/summer-bootcamp 
https://www.incibe.es/en/events/ecsc 

LEAs basic and specialised training for the protection of their networks and information systems: For the national LEAs (National Police and Guardia Civil) it is fundamental to have a proper and updated training to protect their own networks and information systems, in the same manner that to prevent and investigate cybercrime and cyberattacks. Therefore, one the four pillars of this plan is devoted to basic and specialized training of the LEAs in these matters. 

Sources: https://occ.ses.mir.es/publico/occ/dam/jcr:ccbfd6ae-b17d-492c-8a0b-fddc87c943f9/Plan%20estrat%C3%A9gico%20MIR%20cibercrimen,%20ciberseguridad%20y%20desinformaci%C3%B3n%20-%20PEICCD%202026.pdf 

CCN STIC training Program: The CCN, in partnership with the National Institute of Public Administration, maintains a continuous training program for public administration staff. This initiative aims to ensure that personnel are kept abreast of various cybersecurity developments, encompassing the National Security Framework (ENS) and both technical and managerial elements. 

Sources: https://angeles.ccn-cert.cni.es/es/cursos-stic 

CCN cybersecurity Learning Program: The ÁNGELES platform provides a comprehensive range of courses and educational resources designed to empower public administration personnel, professionals, and citizens in the active defense of digital infrastructures. 

Sources: https://angeles.ccn-cert.cni.es