This work constitutes part of the ENISA Work Programme 2011 in the area of Economics of Security. The purpose of this document is to assess the economic efficiency of security breach notification and to develop recommendations that will help to incr ease it. This work is based on the findings of...

For the fifth consecutive year, last October the European Cyber Security Month (ECSM) campaign was successfully executed across Europe. The campaign was coordinated and supported by ENISA, the European Commission, Europol's Cyber Crime Centre (EC3), European Banking Federation, the Estonian...

The concept of Cybersecurity Culture (CSC) refers to the knowledge, beliefs, perceptions, attitudes, assumptions, norms and values of people regarding cybersecurity and how they manifest themselves in people's behaviour with information technologies. CSC encompasses familiar topics including...

While online users increasingly rely on the use of mobile applications (apps) for their everyday activities and needs, the processing of personal data through such tools poses significant risks to users' security and privacy. Such risks stem mainly from the variety of data and sensors held in...

Quite often implementing European legislative initiatives relies on the availability of trustworthy information technology which means that the technology options used must be duly scrutinised and standardised prior to being put in good use. Over the last years, ENISA has engaged in a number of...

This document proposes guidelines to SB and (Q)TSP aimed at facilitating the implementation of the provisions related to trust services of the eIDAS Regulation in the area of termination of trust services. Termination of QTS is addressed here in a broad sense covering from partial to complete...