Article 1 – Subject matter and scope Article 2 – Definitions Article 3 – Mandate Article 4 – Objectives Article 5 – Development and implementation of Union policy and law Article 6 – Capacity-building Article 7 – Operational cooperation at Union level Article 8 – Market, cybersecurity certification, and standardisation Article 9 – Knowledge and information Article 10 – Awareness-raising and education Article 11 – Research and innovation Article 12 – International cooperation Article 13 – Structure of ENISA Article 14 – Composition of the Management Board Article 15 – Functions of the Management Board Article 16 – Chairperson of the Management Board Article 17 – Meetings of the Management Board Article 18 – Voting rules of the Management Board Article 19 – Executive Board Article 20 – Duties of the Executive Director Article 21 – ENISA Advisory Group Article 22 – Stakeholder Cybersecurity Certification Group Article 23 – National Liaison Officers Network Article 24 – Single programming document Article 25 – Declaration of interests Article 26 – Transparency Article 27 – Confidentiality Article 28 – Access to documents Article 29 – Establishment of ENISA’s budget Article 30 – Structure of ENISA’s budget Article 31 – Implementation of ENISA’s budget Article 32 – Financial rules Article 33 – Combating fraud Article 34 – General provisions Article 35 – Privileges and immunity Article 36 – Executive Director Article 37 – Seconded national experts and other staff Article 38 – Legal status of ENISA Article 39 – Liability of ENISA Article 40 – Language arrangements Article 41 – Protection of personal data Article 42 – Cooperation with third countries and international organisations Article 43 – Security rules on the protection of sensitive non-classified information and classified information Article 44 – Headquarters Agreement and operating conditions Article 45 – Administrative control Article 46 – European cybersecurity certification framework Article 47 – The Union rolling work programme for European cybersecurity certification Article 48 – Request for a European cybersecurity certification scheme Article 49 – Preparation, adoption and review of a European cybersecurity certification scheme Article 50 – Website on European cybersecurity certification schemes Article 51 – Security objectives of European cybersecurity certification schemes Article 52 – Assurance levels of European cybersecurity certification schemes Article 53 – Conformity self-assessment Article 54 – Elements of European cybersecurity certification schemes Article 55 – Supplementary cybersecurity information for certified ICT products, ICT services and ICT processes Article 56 – Cybersecurity certification Article 57 – National cybersecurity certification schemes and certificates Article 58 – National cybersecurity certification authorities Article 59 – Peer review Article 60 – Conformity assessment bodies Article 61 – Notification Article 62 – European Cybersecurity Certification Group Article 63 – Right to lodge a complaint Article 64 – Right to an effective judicial remedy Article 65 – Penalties Article 66 – Committee procedure Article 67 – Evaluation and review Article 68 – Repeal and succession Article 69 – Entry into force ANNEX – REQUIREMENTS TO BE MET BY CONFORMITY ASSESSMENT BODIES The EU Cybersecurity Certification Framework Explained ENISA: The European Union Agency for Cybersecurity Prepare for EU Cyber Resilience Act Compliance: Avoid Penalties EU Cybersecurity Strategy: Everything You Need to Know