This guide for SMEs updates the 2009 ENISA Cloud Computing Risk Assessment for SMEs and the 2009 ENISA Assurance Framework. We have deliberately consolidated the risks and reduced the number of security questions to make it more suitable for SMEs, with limited time and resources to go into a lot...

2018 was a year that has brought significant changes in the cyberthreat landscape. Those changes had as source discrete developments in motives and tactics of the most important threat agent groups, namely cyber-criminals and state-sponsored actors. Monetization motives have contributed to the...

ENISA is one of the key stakeholders in Europe in the area of Network and Information Security (NIS). Given its positioning, ENISA is active in the area of education and awareness, using its knowledge to promote NIS skills and supporting the Commission in enhancing the skills and competence of...

The goal of this study is to provide an analysis of cyber crisis management by identifying relations between this emerging field and the better established subject of general crisis management. This includes terminology and key concepts in these fields. This study further seeks to gain knowledge...

Training is everything. The peach was once a bitter almond; cauliflower is nothing, but cabbage with a college education. [Mark Twain, 1835-1910] Why write a guide about training methodologies when there are so many resources and theories on "trainings" and "trainers" already? There are two...

This report focuses on analysing the current situation concerning cybersecurity challenge competitions in Europe. The experience gathered will be the basis to develop a pan-European competition on cybersecurity. The European Cyber Security Challenge Competition 2015 is set to be the result of a...

During 2013, ENISA prepared and published its first reports with cryptographic guidelines supporting the security measures required to protect personal data in online systems. Recently published EC Regulations on the measures applicable to the notification of personal data breaches [118] make...

Cryptographic algorithms, when used in networks, are used within a cryptographic protocol. In the ENISA algorithms report of 2013 [113], several protocols were discussed. In this document (which is the sister document of the 2014 report [115]) we extend the work in the 2013 report to cover more...

Information exchange on the Internet is possible thanks to a physical infrastructure composed of network equipment and cables, such as fibre optics. The majority of these cables are usually laid underground, for esthetic reasons and to improve their security. In the last years, ENISA has noticed...