Defending Europe against cyber attack
How ENISA helps EU member states with national cyber defences, as well as securing European-wide business networks.

When it really comes down to it, the UK is a world leader when it comes to information security.
Jay Heiser, research vice president for Gartner, said it himself in a recent interview with IT PRO when he said that the UK information security industry had taken "global leadership" and was something that the "local community should be proud of."
However, this rather happy situation is not the same in the rest of Europe. Many European countries simply do not have the funding and expertise to reach the level of network security that many organisations in the UK have.
Incidents such as the 2007 cyberattack on Estonia where the websites of government ministers, political parties, newspapers, banks and companies were disabled has highlighted to many European Union member states that information security is now a big priority, as an attack could cripple a country's infrastructure.
There was no organisation that the smaller European businesses could call upon to deal with any infosec problems - unlike the UK and US, where many groups focus on the problem.
ENISA
With the formation of ENISA (European Network and Information Security Agency), European member states have their own organisation, which looks to help European business communities to prevent, address and respond to network security problems.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
ENISA's remit is to develop a culture of network and information security for the citizens, consumers, enterprises and public sectors of the European Union. It ultimately strives to create a centre of expertise where member states and EU institutions - including the UK - can seek advice on matters relating to network and information security.
ENISA was established in 2004 by the European Parliament. Originally set up in Brussels, like many EU agencies, it has since moved to Heraklion, an island of Crete in Greece where it now has its current base. It started operations in September 2005.
How big is the security problem in Europe?
ENISA admitted that it currently doesn't know how big the information security problem is in Europe. Though that is the crucial question that many member states asked, as it would give them some clue about how many resources were needed to deal with the problem, ENISA had no answer.
"We don't know how big the problem is," said Ronald De Bruin, head of the cooperation and support department at ENISA. "The reasons are that many organisations are reluctant to affect their brand image. It is also difficult to report because people do not know how and to whom they should report to the police, IT support managers, etc."
He also said that many reports came from corporate organisations which had an interest in giving certain high figures in order to stimulate their business. It was difficult to quantify the results and come to any conclusions about the scale of the European information security problem.
-
New chapter, same partners: Keeping the channel aligned with change
Industry Insights How to maintain strong channel partnerships amid evolving strategies and market change
-
Palo Alto Networks snaps up CyberArk in identity security push
News The acquisition marks the latest in a string for Palo Alto Networks
-
Meta isn’t playing ball with the EU on the AI Act
News Europe is 'heading down the wrong path on AI', according to Meta, with the company accusing the EU of overreach
-
‘Confusing for developers and bad for users’: Apple launches appeal over ‘unprecedented’ EU fine
News Apple is pushing back against new app store rules imposed by the European Commission, suggesting a €500m fine is a step too far.
-
Apple, Meta hit back at EU after landmark DMA fines
News The European Commission has issued its first penalties under the EU Digital Markets Act (DMA), fining Apple €500 million and Meta €200m.
-
‘Europe could do it, but it's chosen not to do it’: Eric Schmidt thinks EU regulation will stifle AI innovation – but Britain has a huge opportunity
News Former Google CEO Eric Schmidt believes EU AI regulation is hampering innovation in the region and placing enterprises at a disadvantage.
-
The EU just shelved its AI liability directive
News The European Commission has scrapped plans to introduce the AI Liability Directive aimed at protecting consumers from harmful AI systems.
-
A big enforcement deadline for the EU AI Act just passed – here's what you need to know
News The first set of compliance deadlines for the EU AI Act passed on the 2nd of February, and enterprises are urged to ramp up preparations for future deadlines.
-
EU agrees amendments to Cyber Solidarity Act in bid to create ‘cyber shield’ for member states
News The EU’s Cyber Solidarity Act will provide new mechanisms for authorities to bolster union-wide security practices
-
The EU's 'long-arm' regulatory approach could create frosty US environment for European tech firms
Analysis US tech firms are throwing their toys out of the pram over the EU’s Digital Markets Act, but will this come back to bite European companies?