ENISA
What is ENISA?
The European Union Agency for Cybersecurity that contributes to EU cyber policy and supports member states in improving cybersecurity capabilities.
Terms that appear alongside enisa
Each of these is named in at least one of the same controls as enisa. The number is how many controls name both.
- cybersecurity 25 shared controls
- nist 22 shared controls
- risk assessment 14 shared controls
- incident response 12 shared controls
- vulnerability 9 shared controls
- policy 8 shared controls
- business continuity 8 shared controls
- encryption 7 shared controls
Frameworks that govern enisa
What the standards actually require on enisa
Requirements naming enisa across 6 standards, quoted from the control text.
A defined set of provider types owes a second, more specific registration on top of the Article 3(4) duty: DNS service providers, TLD name registries, domain name registration service providers, cloud computing, data centre and content delivery network provide...
nis2-directive::Art.27.2 · Submit the ENISA registry information required of digital infrastructure and digital service providers →FIRST coordination with national CSIRTs + sector ISACs + regional bodies + regulatory frameworks. NATIONAL CSIRTs (FIRST teams): US-CERT + CISA + DOE-CIRC + DOD-CYBERCOM + UK NCSC + AusCERT + JPCERT/CC + KrCERT/CC + CN-CERT + IR-CERT + many others (FIRST membe...
FIRST-Sectoral-NationalCSIRT · FIRST Sectoral Coordination - National CSIRTs, ISACs, ENISA, NIS2 + Industry Frameworks →Detect is the third of five functional elements per MSC-FAL.1/Circ.3/Rev.2. Activities include: (1) Anomaly Detection - behavioural baselines for OT systems (bridge equipment patterns + engine room SCADA + propulsion + cargo) + network anomaly detection (deep...
IMO-MSC-FAL-Detect-AnomalyDetection-OT-IT-Monitoring-Reporting-BridgeAlarms · IMO MSC-FAL Detect Function - Anomaly Detection + OT and IT System Monitoring + Bridge Alarms + Log Aggregation + Incident Reporting Channels + Crew Observation →Article 18 enables Union funding for mutual-assistance actions between Member States in case of cybersecurity emergencies, including dispatching technical experts, sharing of detection / response tools, and joint operational coordination.
CSA-Art.18 · Actions supporting mutual assistance (Article 18) →Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication ensures the validity of the claimed identities of the entities participating in communication (e.g.
X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →Article 6 designates the electricity cybersecurity competent authority (ECCA) for each Member State, which may be the NIS2 competent authority or a separate sector-specific authority.
NCCS-Art.6_7 · Competent authorities + coordination (NCCS Articles 6-7) →Questions people ask about enisa
What is ENISA?
Why is ENISA important for compliance?
Which compliance frameworks address ENISA?
Where can I learn more about ENISA?
See how ENISA applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.