Home › Data Protection & Digital › Cybersecurity Act

Cybersecurity Act

Regulation (EU) 2019/881 on ENISA and on information and communications technology cybersecurity certification
32019R0881 · official text on EUR-Lex

Articles

• Article 1 — Subject matter and scope
• Article 2 — Definitions

Chapter I Mandate and objectives

• Article 3 — Mandate
• Article 4 — Objectives

Chapter II Tasks

• Article 5 — Development and implementation of Union policy and law
• Article 6 — Capacity-building
• Article 7 — Operational cooperation at Union level
• Article 8 — Market, cybersecurity certification, and standardisation
• Article 9 — Knowledge and information
• Article 10 — Awareness-raising and education
• Article 11 — Research and innovation
• Article 12 — International cooperation

Chapter III Organisation of ENISA

• Article 13 — Structure of ENISA

Section 1 Management Board

• Article 14 — Composition of the Management Board
• Article 15 — Functions of the Management Board
• Article 16 — Chairperson of the Management Board
• Article 17 — Meetings of the Management Board
• Article 18 — Voting rules of the Management Board

Section 2 Executive Board

• Article 19 — Executive Board

Section 3 Executive Director

• Article 20 — Duties of the Executive Director

Section 4 ENISA Advisory Group, Stakeholder Cybersecurity Certification Group and National Liaison Officers Network

• Article 21 — ENISA Advisory Group
• Article 22 — Stakeholder Cybersecurity Certification Group
• Article 23 — National Liaison Officers Network

Section 5 Operation

• Article 24 — Single programming document
• Article 25 — Declaration of interests
• Article 26 — Transparency
• Article 27 — Confidentiality
• Article 28 — Access to documents

Chapter IV Establishment and structure of ENISA’s budget

• Article 29 — Establishment of ENISA’s budget
• Article 30 — Structure of ENISA’s budget
• Article 31 — Implementation of ENISA’s budget
• Article 32 — Financial rules
• Article 33 — Combating fraud

Chapter V Staff

• Article 34 — General provisions
• Article 35 — Privileges and immunity
• Article 36 — Executive Director
• Article 37 — Seconded national experts and other staff

Chapter VI General provisions concerning ENISA

• Article 38 — Legal status of ENISA
• Article 39 — Liability of ENISA
• Article 40 — Language arrangements
• Article 41 — Protection of personal data
• Article 42 — Cooperation with third countries and international organisations
• Article 43 — Security rules on the protection of sensitive non-classified information and classified information
• Article 44 — Headquarters Agreement and operating conditions
• Article 45 — Administrative control
• Article 46 — European cybersecurity certification framework
• Article 47 — The Union rolling work programme for European cybersecurity certification
• Article 48 — Request for a European cybersecurity certification scheme
• Article 49 — Preparation, adoption and review of a European cybersecurity certification scheme
• Article 50 — Website on European cybersecurity certification schemes
• Article 51 — Security objectives of European cybersecurity certification schemes
• Article 52 — Assurance levels of European cybersecurity certification schemes
• Article 53 — Conformity self-assessment
• Article 54 — Elements of European cybersecurity certification schemes
• Article 55 — Supplementary cybersecurity information for certified ICT products, ICT services and ICT processes
• Article 56 — Cybersecurity certification
• Article 57 — National cybersecurity certification schemes and certificates
• Article 58 — National cybersecurity certification authorities
• Article 59 — Peer review
• Article 60 — Conformity assessment bodies
• Article 61 — Notification
• Article 62 — European Cybersecurity Certification Group
• Article 63 — Right to lodge a complaint
• Article 64 — Right to an effective judicial remedy
• Article 65 — Penalties
• Article 66 — Committee procedure
• Article 67 — Evaluation and review
• Article 68 — Repeal and succession
• Article 69 — Entry into force