• Guideline on Security Measures under the EECC

  This document, the Technical Guideline for Security Measures, provides guidance to competent authorities about the technical details of implementing Articles 40 and 41 of the EECC: how to ensure that providers assess risks and take appropriate...

  Published on July 07, 2021

• 5G Supplement - to the Guideline on Security Measures under the EECC

  This document contains a 5G technology profile which supplements the technology-neutral Guideline on Security Measures under the EECC. The document gives additional guidance to competent national authorities about how to ensure implementation and...

  Published on July 07, 2021

• NIS Investments Report

  Four years after the NIS Directive entered into force and two years after the transposition by Member States into their national laws, this report presents the findings of a survey of 251 organisations across five EU Member States (France, Germany...

  Published on December 11, 2020

• Power Sector Dependency on Time Service: attacks against time sensitive services

  This publication describes the threats against energy providers’ services which depend on the availability of precise timing and communication networks. It provides a typical architecture which supports the time measurement service. Then it...

  Published on May 12, 2020

• Challenges and opportunities for EU cybersecurity start-ups

  Based on extensive analysis of the identified challenges and opportunities, as well as on feedback collected from a panel of experts, this report proposes a set of recommendations to start-ups and SMEs active in the NIS market.

  Published on May 15, 2019

• Good practices on the implementation of regulatory technical standards

  MS approaches on PSD 2 implementation: commonalities in risk management and incident reporting - The main objective of this study is to identify the differences introduced by Member States in the implementation of the PSD2. In particular, the aim is...

  Published on January 24, 2019

• Good practices on interdependencies between OES and DSPs

  This study is concerned with dependencies and interdependencies among Operators of Essential Services (OES) and Digital Service Providers (DSPs) as defined in the NIS Directive and addresses emerging dependencies and interdependencies across...

  Published on November 30, 2018

• Guidelines on assessing DSP security and OES compliance with the NISD security requirements

  This report presents the steps of an information security audit process for the OES compliance, as well as of a self-assessment/ management framework for the DSP security against the security requirements set by the NIS Directive. In addition, it...

  Published on November 28, 2018