This report recommends that the European Commission, with the support of the Member States, pursuant to the NIS Directive, adopt a standards based framework for the exchange of threat and defensive measure information that impacts the functioning of Network Information Infrastructure (NII). The...

The NIS Directive aims at creating a CSIRT Network "to contribute to developing confidence and trust between the Member States and to promote swift and effective operational cooperation". The Directive states that each Member State shall designate one or more CSIRTs that shall comply with a set...

Cyber hygiene plays a critical role across the EU in protecting businesses, but it also provides the foundations for protecting the infrastructure and customer data which businesses rely on. This importance is recognised within the European Union to the extent that almost all the Member States...

Distributed ledger technology - commonly referred as Blockchain - has emerged as candidate for financial institutions to reform their businesses. The speed and cost of doing business using distributed ledger technology is expected to improve by simplifying back-office operations and lowering the...

The use of a mobile to effect payment for goods and services represents a paradigm shift towards digital only payments and has been driven by consumers who wish to make purchases at retail stores or to transfer funds using their mobile "digital wallet". For most consumers the ability to pay by...

The year 2015 has been another very successful year for the Agency. It has been a year in which we have strengthened our relations with our stakeholders and assisted them in making significant improvements to the state of cybersecurity thourghout the EU. In parallel, we continue to make internal...

For the purposes of this study, Personal Data Clouds ("PDCs") are defined as technological solutions aiming to provide to end-users the typical data collection and storage capabilities of data management systems but also, to help end-users regain control over their data. Accordingly, PDCs are...

For the fifth year, ENISA publishes the annual report about significant outage incidents in the European electronic communications sector, which are reported to ENISA and the European Commission (EC) under Article 13a of the Framework Directive (2009/140/EC), by the National Regulatory...

The aim of this document is to provide good practices on using taxonomies for incident detection and prevention by taking into account the input received from the CSIRT community and relevant information from previous ENISA studies. In addition, it provides conclusions and recommendations on...