The purpose of the evaluation is to assess the performance of ENISA in achieving its mandate, objective and tasks, as well as the provisions of the European Cybersecurity Certification Framework.
ENISA’s objectives include assisting in the development and implementation of Union policies related to cybersecurity, including sectoral policies; supporting capacity-building and preparedness across the Union; promoting cooperation, including information sharing and coordination at Union level; increasing cybersecurity capabilities at Union level in preventing and responding to cyber threats; contributing to the establishment and maintenance of the European cybersecurity certification, and promoting a high level of cybersecurity awareness.
The Commission has awarded to a consortium composed by Intellera Consulting, PPMI and PwC EU Services the elaboration of a study that will provide input and assist the Commission in evaluating the impact, effectiveness and efficiency of ENISA and of the provisions of Regulation (EU) 2019/881 on the European cybersecurity certification framework. The study started in November 2023 and will last until the end of Q2-2024. The Commission will present the findings and conclusions of the study during the second half of 2024.
The contractor carrying out this study has launched a consultation through a structured questionnaire in which stakeholders can express their views regarding the role of ENISA and of the performance of the European Cybersecurity Certification Framework. This consultation will complement the call for evidence published in Q3-2023 by the Commission.
Stakeholders are invited to participate in this study via this link, the consultation has been extended to 5 March 2024.