Countries · Europe
European Union
National competent authority: Agenzia dell'Unione europea per la cibersicurezza (ENISA)
Strategy in force
Documents by type
National cybersecurity strategy (1)
Regulation (14)
Regulation (EU) 2025/37 amending Regulation (EU) 2019/881 as regards managed security services
Regulation (EU) 2025/38 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents (Cyber Solidarity Act)
Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)
Commission Implementing Regulation (EU) 2024/2690 laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures and significant incidents
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)
Regulation (EU) 2024/1183 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework (eIDAS 2)
Commission Delegated Regulation (EU) 2024/1366 establishing a network code on sector-specific rules for cybersecurity aspects of cross-border electricity flows (NCCS)
Regulation (EU, Euratom) 2023/2841 laying down measures for a high common level of cybersecurity at the institutions, bodies, offices and agencies of the Union
Regulation (EU) 2023/1230 on machinery (Machinery Regulation)
Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)
Commission Delegated Regulation (EU) 2022/30 supplementing Directive 2014/53/EU (Radio Equipment Directive) with regard to the essential requirements of Article 3(3)(d), (e) and (f)
Regulation (EU) 2021/887 establishing the European Cybersecurity Industrial, Technology and Research Competence Centre and the Network of National Coordination Centres
Regulation (EU) 2019/881 on ENISA and on information and communications technology cybersecurity certification (Cybersecurity Act)
Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, GDPR)
Directive (5)
Directive (EU) 2022/2557 on the resilience of critical entities (CER Directive)
Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive)
Directive (EU) 2016/1148 concerning measures for a high common level of security of network and information systems across the Union (NIS Directive)
Directive 2014/53/EU on the harmonisation of the laws of the Member States relating to the making available on the market of radio equipment (Radio Equipment Directive, RED)
Directive 2013/40/EU on attacks against information systems
Relations between documents
- Regulation (EU) 2025/37 amends Regulation (EU) 2019/881
- Regulation (EU) 2025/37 cites Regulation (EU) 2025/38
- Implementing Regulation (EU) 2024/2690 implements Directive (EU) 2022/2555
- Regulation (EU) 2024/1689 cites Regulation (EU) 2024/2847
- Delegated Regulation (EU) 2024/1366 cites Directive (EU) 2022/2555
- Directive (EU) 2022/2555 repeals Directive (EU) 2016/1148
- Delegated Regulation (EU) 2022/30 implements Directive 2014/53/EU