European Union Agency for Cybersecurity


The European Union Agency for Cybersecurity – self-designation ENISA from the abbreviation of its original name – is an agency of the European Union. It is fully operational since September 1, 2005. The Agency is located in Athens, Greece and has a second office in Heraklion, Greece.            
ENISA was created in 2004 by EU under the name of European Network and Information Security Agency. ENISA's Regulation is the EU Regulation of the European Parliament and of the Council of 17 April 2019 on ENISA and on information and communications technology cybersecurity certification and repealing EU Regulation No 526/2013. The Agency works closely together with the EU Members States and other stakeholders to deliver advice and solutions as well as improving their cybersecurity capabilities. It also supports the development of a cooperative response to large-scale cross-border cybersecurity incidents or crises and since 2019, it has been drawing up cybersecurity certification schemes.
ENISA assists the Commission, the member states and, consequently, the business community in meeting the requirements of network and information security, including present and future EU legislation. ENISA ultimately strives to serve as a centre of expertise for both member states and EU Institutions to seek advice on matters related to network and information security.
ENISA has been supporting the organization of the "" pan-European cybersecurity exercises since 2010.

Organisation

ENISA is managed by the executive director and supported by a staff composed of experts representing stakeholders such as the information and communication technologies industry, consumer groups and academic experts. The agency is overseen by the executive board and the management board, which are composed of representatives from the EU member states, the EU Commission and other stakeholders.
Set up in 2004 as an informal point of reference into the member states, as of 27 June 2019 the National Liaison Officers network has become a statutory body of ENISA. The National Liaison Officers Network facilitates the exchange of information between ENISA and the member states. The agency is also assisted by the Advisory Group which is composed of “nominated members” and members appointed “ad personam”, all in total 33 members from all over Europe. The advisory group focuses on issues relevant to stakeholders and brings them to the attention of ENISA.
In order to carry out its tasks, the agency has a budget of nearly €17 million for the year 2019 and 70 statutory staff members. In addition, the agency employs a number of other employees including seconded national experts, trainees and interim agents. There are plans for additional experts to be integrated into the agency following the entering into force of Regulation 2019/881.

History

In 2007, European Commissioner Viviane Reding proposed that ENISA be folded into a new European Electronic Communications Market Authority. By 2010, Commissioner Neelie Kroes signalled that the European Commission wanted a reinforced agency. The agency mandate was extended up to 2012 with an annual budget of €8 million, under the leadership of Dr. Udo Helmbrecht. The last extension of ENISA's mandate before it became permanent was done by the EU Regulation of the European Parliament and of the Council of 21 May 2013, repealing Regulation 460/2004. As of 27 June 2019, ENISA has been established for an indefinite period.
ENISA headquarters, including its administration and support functions, were originally based in Heraklion. The choice of a rather remote site was contentious from the outset, particularly since Greece held the EU presidency when the agency’s mandate was being negotiated. In addition, the agency has had a liaison office in Athens since October 2009. In 2013, it moved one-third of its staff of then sixty from Crete to Athens. In 2016, the Committee on Budgets backed ENISA’s bid to shut down the Heraklion office. In 2019, ENISA has two offices in Athens and Heraklion, Greece.

Executive director