EU Cybersecurity Agency (ENISA) and information and communication technology cybersecurity certification (Cybersecurity Act)

A regulation on the EU Cybersecurity Agency (ENISA) and ICT cybersecurity certification (the Cybersecurity Act). Amendments expand ENISA's support to industry, SMEs and start-ups, set out 'security by design and by default' obligations for manufacturers and service providers, and define how European cybersecurity certification schemes attest that ICT products, processes and services resist threats at a given level of assurance, including via standards and conformity assessment.