1.

Within the purpose set out in Article 1, and in order to attain the objectives set out in Article 2, whilst respecting Article 1(2), the Agency shall perform the following tasks: support the development of Union policy and law, by: assisting and advising on all matters relating to Union network and information security policy and law; providing preparatory work, advice and analyses relating to the development and update of Union network and information security policy and law; analysing publicly available network and information security strategies and promoting their publication; support capability building by: supporting Member States, at their request, in their efforts to develop and improve the prevention, detection and analysis of and the capability to respond to network and information security problems and incidents, and providing them with the necessary knowledge; promoting and facilitating voluntary cooperation among the Member States and between the Union institutions, bodies, offices and agencies and the Member States in their efforts to prevent, detect and respond to network and information security problems and incidents where these have an impact across borders; assisting the Union institutions, bodies, offices and agencies in their efforts to develop the prevention, detection and analysis of and the capability to respond to network and information security problems and incidents, in particular by supporting the operation of a Computer Emergency Response Team (CERT) for them; supporting the raising of the level of capabilities of national/governmental and Union CERTs, including by promoting dialogue and exchange of information, with a view to ensuring that, with regard to the state of the art, each CERT meets a common set of minimum capabilities and operates according to best practices; supporting the organisation and running of Union network and information security exercises, and, at their request, advising Member States on national exercises; assisting the Union institutions, bodies, offices and agencies and the Member States in their efforts to collect, analyse and, in line with Member States’ security requirements, disseminate relevant network and information security data; and on the basis of information provided by the Union institutions, bodies, offices and agencies and the Member States in accordance with provisions of Union law and national provisions in compliance with Union law, maintaining the awareness, on the part of the Union institutions, bodies, offices and agencies as well as the Member States of the latest state of network and information security in the Union for their benefit; supporting the development of a Union early warning mechanism that is complementary to Member States’ mechanisms; offering network and information security training for relevant public bodies, where appropriate in cooperation with stakeholders; support voluntary cooperation among competent public bodies, and between stakeholders, including universities and research centres in the Union, and support awareness raising, inter alia, by: promoting cooperation between national and governmental CERTs or Computer Security Incident Response Teams (CSIRTs), including the CERT for the Union institutions, bodies, offices and agencies; promoting the development and sharing of best practices with the aim of attaining an advanced level of network and information security; facilitating dialogue and efforts to develop and exchange best practices; promoting best practices in information sharing and awareness raising; supporting the Union institutions, bodies, offices and agencies and, at their request, the Member States and their relevant bodies in organising awareness raising, including at the level of individual users, and other outreach activities to increase network and information security and its visibility by providing best practices and guidelines; support research and development and standardisation, by: facilitating the establishment and take-up of European and international standards for risk management and for the security of electronic products, networks and services; advising the Union and the Member States on research needs in the area of network and information security with a view to enabling effective responses to current and emerging network and information security risks and threats, including with respect to new and emerging information and communications technologies, and to using risk-prevention technologies effectively; cooperate with Union institutions, bodies, offices and agencies, including those dealing with cybercrime and the protection of privacy and personal data, with a view to addressing issues of common concern, including by: exchanging know-how and best practices; providing advice on relevant network and information security aspects in order to develop synergies; contribute to the Union’s efforts to cooperate with third countries and international organisations to promote international cooperation on network and information security issues, including by: being engaged, where appropriate, as an observer and in the organisation of international exercises, and analysing and reporting on the outcome of such exercises; facilitating exchange of best practices of relevant organisations; providing the Union institutions with expertise.

← Article 3 · All articles · art_3__para_1__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-02 · Text as adopted (Official Journal); later amendments are not incorporated in this text.