Article 1

This Regulation establishes a European Union Agency for Network and Information Security (ENISA, hereinafter ‘the Agency’) to undertake the tasks assigned to it for the purpose of contributing to a high level of network and information security within the Union and in order to raise awareness of network and information security and to develop and promote a culture, of network and information security in society for the benefit of citizens, consumers, enterprises and public sector organisations in the Union, thus contributing to the establishment and proper functioning of the internal market. The objectives and the tasks of the Agency shall be without prejudice to the competences of the Member States regarding network and information security and in any case to activities concerning public security, defence, national security (including the economic well-being of the state when the issues relate to national security matters) and the activities of the state in areas of criminal law. For the purposes of this Regulation ‘network and information security’ means the ability of a network or an information system to resist, at a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data and the related services offered by or accessible via those networks and systems.

← SECTION 1 · All articles · 1. →

Source: EUR-Lex (Cellar) · retrieved 2026-11-02 · Text as adopted (Official Journal); later amendments are not incorporated in this text.