Article 1 – Subject matter and scope
Article 2 – Definitions
Article 3 – Mandate
Article 4 – Objectives
Article 5 – Development and implementation of Union policy and law
Article 6 – Capacity-building
Article 7 – Operational cooperation at Union level
Article 8 – Market, cybersecurity certification, and standardisation
Article 9 – Knowledge and information
Article 10 – Awareness-raising and education
Article 11 – Research and innovation
Article 12 – International cooperation
Article 13 – Structure of ENISA
Article 14 – Composition of the Management Board
Article 15 – Functions of the Management Board
Article 16 – Chairperson of the Management Board
Article 17 – Meetings of the Management Board
Article 18 – Voting rules of the Management Board
Article 19 – Executive Board
Article 20 – Duties of the Executive Director
Article 21 – ENISA Advisory Group
Article 22 – Stakeholder Cybersecurity Certification Group
Article 23 – National Liaison Officers Network
Article 24 – Single programming document
Article 25 – Declaration of interests
Article 26 – Transparency
Article 27 – Confidentiality
Article 28 – Access to documents
Article 29 – Establishment of ENISA’s budget
Article 30 – Structure of ENISA’s budget
Article 31 – Implementation of ENISA’s budget
Article 32 – Financial rules
Article 33 – Combating fraud
Article 34 – General provisions
Article 35 – Privileges and immunity
Article 36 – Executive Director
Article 37 – Seconded national experts and other staff
Article 38 – Legal status of ENISA
Article 39 – Liability of ENISA
Article 40 – Language arrangements
Article 41 – Protection of personal data
Article 42 – Cooperation with third countries and international organisations
Article 43 – Security rules on the protection of sensitive non-classified information and classified information
Article 44 – Headquarters Agreement and operating conditions
Article 45 – Administrative control
Article 46 – European cybersecurity certification framework
Article 47 – The Union rolling work programme for European cybersecurity certification
Article 48 – Request for a European cybersecurity certification scheme
Article 49 – Preparation, adoption and review of a European cybersecurity certification scheme
Article 50 – Website on European cybersecurity certification schemes
Article 51 – Security objectives of European cybersecurity certification schemes
Article 52 – Assurance levels of European cybersecurity certification schemes
Article 53 – Conformity self-assessment
Article 54 – Elements of European cybersecurity certification schemes
Article 55 – Supplementary cybersecurity information for certified ICT products, ICT services and ICT processes
Article 56 – Cybersecurity certification
Article 57 – National cybersecurity certification schemes and certificates
Article 58 – National cybersecurity certification authorities
Article 59 – Peer review
Article 60 – Conformity assessment bodies
Article 61 – Notification
Article 62 – European Cybersecurity Certification Group
Article 63 – Right to lodge a complaint
Article 64 – Right to an effective judicial remedy
Article 65 – Penalties
Article 66 – Committee procedure
Article 67 – Evaluation and review
Article 68 – Repeal and succession
Article 69 – Entry into force
ANNEX – REQUIREMENTS TO BE MET BY CONFORMITY ASSESSMENT BODIES
The EU Cybersecurity Certification Framework Explained
ENISA: The European Union Agency for Cybersecurity
Prepare for EU Cyber Resilience Act Compliance: Avoid Penalties
EU Cybersecurity Strategy: Everything You Need to Know
Scroll to Top