Pursuant to 15 years of implementation of Directive 1999/93/EC1 on a Community framework for electronic signatures, the lack of trust and in particular the perceived lack of legal certainty have made consumers, businesses and public authorities hesitate to carry out transactions electronically...

For the fourth consecutive year, last October the European Cyber Security Month (ECSM) campaign took place across Europe. The campaign was supported by ENISA, the European Commission, Europol's EC3 and the European Banking Federation, plus partners from the Member States, the support for which...

Online marketplaces, online search engines and cloud computing services are considered as Digital Service Providers (DSPs) in the context of the recently adopted Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of...

This document describes a framework for security incident reporting based on the requirements set by arti-cle 19 of the eIDAS regulation. It is being developed on a consensus basis between the experts of the working group formed by ENISA and it is reviewed by various relevant stakeholders from...

The aim of this document is to provide an overview of good practices as regards security measures that are deployed by electronic communication providers in Europe. In particular, the document aims to: - Identify the implemented security measures and approaches within e-communication providers...

ENISA began in 2015 to produce regular information notes, dubbed "InfoNotes". This activity was the object of a final report that advised to continue the development of InfoNotes and their dissemination. ENISA's Amended Work Program 2016 defines the following objectives for the info notes...

On July 1st 2016, Regulation (EU) 910/2014 (hereafter called the eIDAS Regulation), which lays down the rules on electronic identification and trust services for electronic transactions in the internal market came into force covering across Europe in all 28 Member States. It defines trust...

In recent years, many pervasive systems for healthcare have been proposed, discussed and sometimes realised. Pervasive healthcare is highly multifaceted, with many applications focusing on interoperability with the legacy hospital assets, the "traditional hospital", the security and privacy of...

Cyber insurance was created to address risk that cannot be reasonably mitigated by security measures. While it initially started in a limited form, it developed to cover more and more types of cyber risk. In comparison with other insurance sectors, cyber insurance appears to have a lower...

This document was prepared for the NIS Platform WG2 members introducing the main functions of CSIRTs from incident handling to crisis coordination - a high-level summary of the basics of incident response based on ENISA's previous work on CSIRTs and resilient European infrastructures. The...