European Union Agency for Cybersecurity (ENISA) – 2024 Report on the State of the Cybersecurity in the Union
Under Article 18 of the NIS 2 Directive, ENISA has been entrusted with the task of producing a biennial report on the state of cybersecurity within the EU. This report offers a data-driven assessment of cybersecurity maturity across Europe, highlighting existing capabilities and identifying gaps. It also includes targeted policy recommendations to strengthen the overall cybersecurity posture within the Union.
The analysis draws from diverse resources, including the EU Cybersecurity Index, NIS Investment reports, the Foresight 2030 study, and the ENISA Threat Landscape report. Developed in close collaboration with all 27 EU Member States and the European Commission, the report reflects a comprehensive and collective effort to enhance cybersecurity across the region.
Key findings
A Union-level risk assessment revealed significant cyber threats to the EU, emphasizing vulnerabilities exploited by malicious actors targeting EU entities. In terms of cybersecurity capabilities, Member States have developed strategies broadly aligned in objectives. However, critical sectors vary significantly in size and importance, complicating oversight and consistent implementation of cybersecurity measures. At the citizen level, cybersecurity awareness appears to have increased among EU residents. Younger generations demonstrate higher digital skill levels, although disparities persist due to differences in educational programs and their maturity across Member States.
Policy recommendations
The report highlights four key priority areas for policy action: 1) policy implementation, 2) cyber crisis management, 3) supply chain security, and 4) skills development. It proposes six targeted recommendations that address these priorities while also focusing on enhancing the capabilities of critical sector operators and improving cybersecurity awareness and hygiene practices across the EU.
Read ENISA's press release and access the full report here.