Defending Europe against cyber attack
How ENISA helps EU member states with national cyber defences, as well as securing European-wide business networks.

Another of the three year programmes was to strengthen the resilience of European networks. With modern society becoming increasingly dynamic and competitive, ENISA considered network outages as one of the biggest challenges to business critical applications.
Pirotti said in ENISA's last quarterly review: "Public institutions, citizens and businesses all demand an acceptable level of service in the networks, with resilience to faults and challenges to their normal operation."
ENISA said that when it came to network security, it had to be honest some member states in Europe were better equipped than others. Rather than think of it as a negative, however, it was looked upon as an opportunity.
There was already some information sharing between countries but more on an ad hoc basis, which usually involved coincidence or a cultural proximity. One of ENISA's jobs was to make sure that countries shared information in a much more regular and structured way.
De Bruin said: "The way we do that is by brokering member states between those who have a need and those who could possibly help."
This was a big challenge, as there were the complexities as well as policy differences when it came from working with a range of European countries. It was also not always transparent, with national business infrastructures changing day to day.
De Bruin said of the network complexity: "It not like an energy grid or water supply that is stable. The internet is dynamic by nature, and that makes it complicated."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Defending against cyber attacks
European businesses needed a strong network for many reasons, but also to counter the threat of cyber attacks. The 2007 Estonian cyber attack made Europe sit up and realise that a well-timed or well-aimed attack had the potential to completely cripple a network and a country's entire business infrastructure.
By 2010, ENISA hoped to have half of the European member states making use of ENISA networking recommendations that will affect their policy making. ENISA was in the process of working towards this target by working with national regulators, operators and technology vendors who are all play a part in offering Europe resilient technologies.
"This is a programme which has raised high attention with the EU member states," said De Bruin. "Also with the states that are already very well equipped, as they strongly believe that this is a something which cannot be solved simply on a national level and needs a European effort on top of it."
Importantly, ENISA was independent and trusted which meant that the European member states could rely on it to be fair on all the countries that it was trying to bring together. Competition and cultural difference was an obvious problem when member states had tried to work together previously.
-
RSAC Conference 2025: The front line of cyber innovation
ITPro Podcast Ransomware, quantum computing, and an unsurprising focus on AI were highlights of this year's event
-
Anthropic CEO Dario Amodei thinks we're burying our heads in the sand on AI job losses
News With AI set to hit entry-level jobs especially, some industry execs say clear warning signs are being ignored
-
Apple, Meta hit back at EU after landmark DMA fines
News The European Commission has issued its first penalties under the EU Digital Markets Act (DMA), fining Apple €500 million and Meta €200m.
-
‘Europe could do it, but it's chosen not to do it’: Eric Schmidt thinks EU regulation will stifle AI innovation – but Britain has a huge opportunity
News Former Google CEO Eric Schmidt believes EU AI regulation is hampering innovation in the region and placing enterprises at a disadvantage.
-
The EU just shelved its AI liability directive
News The European Commission has scrapped plans to introduce the AI Liability Directive aimed at protecting consumers from harmful AI systems.
-
A big enforcement deadline for the EU AI Act just passed – here's what you need to know
News The first set of compliance deadlines for the EU AI Act passed on the 2nd of February, and enterprises are urged to ramp up preparations for future deadlines.
-
EU agrees amendments to Cyber Solidarity Act in bid to create ‘cyber shield’ for member states
News The EU’s Cyber Solidarity Act will provide new mechanisms for authorities to bolster union-wide security practices
-
The EU's 'long-arm' regulatory approach could create frosty US environment for European tech firms
Analysis US tech firms are throwing their toys out of the pram over the EU’s Digital Markets Act, but will this come back to bite European companies?
-
EU AI Act risks collapse if consensus not reached, experts warn
Analysis Industry stakeholders have warned the EU AI Act could stifle innovation ahead of a crunch decision
-
Three quarters of UK firms unprepared for NIS2 regulations, study finds
News Senior management can be held personally liable for non-compliance under NIS2 rules