Defined terms — Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance)
European Union · 32019R0881 · 1205 provisions
11 defined in this instrument, 11 borrowed from other acts.
accreditation — borrowed from another act; this instrument states no meaning of its own (15)
assurance level — a basis for confidence that an ICT product, ICT service or ICT process meets the security requirements of a specific European cybersecurity certification scheme, indicates the level at which an ICT product, ICT service or ICT process has been evaluated but as such does not measure the security of the ICT product, ICT service or ICT process concerned (21)
conformity assessment — borrowed from another act; this instrument states no meaning of its own (17)
conformity assessment body — borrowed from another act; this instrument states no meaning of its own (18)
conformity self-assessment — an action carried out by a manufacturer or provider of ICT products, ICT services or ICT processes, which evaluates whether those ICT products, ICT services or ICT processes meet the requirements of a specific European cybersecurity certification scheme (22)
cyber threat — any potential circumstance, event or action that could damage, disrupt or otherwise adversely impact network and information systems, the users of such systems and other persons (8)
cybersecurity — the activities necessary to protect network and information systems, the users of such systems, and other persons affected by cyber threats (1)
digital service provider — borrowed from another act; this instrument states no meaning of its own (5)
European cybersecurity certificate — a document issued by a relevant body, attesting that a given ICT product, ICT service or ICT process has been evaluated for compliance with specific security requirements laid down in a European cybersecurity certification scheme (11)
European cybersecurity certification scheme — a comprehensive set of rules, technical requirements, standards and procedures that are established at Union level and that apply to the certification or conformity assessment of specific ICT products, ICT services or ICT processes (9)
ICT process — a set of activities performed to design, develop, deliver or maintain an ICT product or ICT service (14)
ICT product — an element or a group of elements of a network or information system (12)
ICT service — a service consisting fully or mainly in the transmission, storing, retrieving or processing of information by means of network and information systems (13)
incident — borrowed from another act; this instrument states no meaning of its own (6)
incident handling — borrowed from another act; this instrument states no meaning of its own (7)
national accreditation body — borrowed from another act; this instrument states no meaning of its own (16)
national cybersecurity certification scheme — a comprehensive set of rules, technical requirements, standards and procedures developed and adopted by a national public authority and that apply to the certification or conformity assessment of ICT products, ICT services and ICT processes falling under the scope of the specific scheme (10)
national strategy on the security of network and information systems — borrowed from another act; this instrument states no meaning of its own (3)
network and information system — borrowed from another act; this instrument states no meaning of its own (2)
operator of essential services — borrowed from another act; this instrument states no meaning of its own (4)
standard — borrowed from another act; this instrument states no meaning of its own (19)
technical specification — a document that prescribes the technical requirements to be met by, or conformity assessment procedures relating to, an ICT product, ICT service or ICT process (20)