ENISA
What is ENISA?
The European Union Agency for Cybersecurity that contributes to EU cyber policy and supports member states in improving cybersecurity capabilities.
Terms that appear alongside enisa
Each of these is named in at least one of the same controls as enisa. The number is how many controls name both.
- cybersecurity 25 shared controls
- nist 22 shared controls
- risk assessment 14 shared controls
- incident response 12 shared controls
- vulnerability 9 shared controls
- policy 8 shared controls
- business continuity 8 shared controls
- encryption 7 shared controls
Frameworks that govern enisa
What the standards actually require on enisa
Requirements naming enisa across 6 standards, quoted from the control text.
A manufacturer that becomes aware of an actively exploited vulnerability in its product must notify it at the same time to the CSIRT designated as coordinator and to ENISA, through the single reporting platform of Article 16.
eu-cyber-resilience-act::Art. 14(1) · Notifying actively exploited vulnerabilities to the CSIRT and ENISA →FIRST coordination with national CSIRTs + sector ISACs + regional bodies + regulatory frameworks. NATIONAL CSIRTs (FIRST teams): US-CERT + CISA + DOE-CIRC + DOD-CYBERCOM + UK NCSC + AusCERT + JPCERT/CC + KrCERT/CC + CN-CERT + IR-CERT + many others (FIRST membe...
FIRST-Sectoral-NationalCSIRT · FIRST Sectoral Coordination - National CSIRTs, ISACs, ENISA, NIS2 + Industry Frameworks →A defined set of provider types owes a second, more specific registration on top of the Article 3(4) duty: DNS service providers, TLD name registries, domain name registration service providers, cloud computing, data centre and content delivery network provide...
nis2-directive::Art.27.2 · Submit the ENISA registry information required of digital infrastructure and digital service providers →Article 18 enables Union funding for mutual-assistance actions between Member States in case of cybersecurity emergencies, including dispatching technical experts, sharing of detection / response tools, and joint operational coordination.
CSA-Art.18 · Actions supporting mutual assistance (Article 18) →Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...
X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →Article 6 designates the electricity cybersecurity competent authority (ECCA) for each Member State, which may be the NIS2 competent authority or a separate sector-specific authority.
NCCS-Art.6_7 · Competent authorities + coordination (NCCS Articles 6-7) →Questions people ask about enisa
What is ENISA?
Why is ENISA important for compliance?
Which compliance frameworks address ENISA?
Where can I learn more about ENISA?
See how ENISA applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.