# Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance) (revoked) EU Regulation 2019/881 · adopted 17 April 2019 Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance) PDFs: Printed copy https://openlegislation.uk/eu-regulation-2019-881/pdf/eur_20190881_adopted_en.pdf ## Introductory text Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance) (revoked) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## Title I: GENERAL PROVISIONS ## 1 Subject matter and scope . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 2 Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## Title II: ENISA (THE EUROPEAN UNION AGENCY FOR CYBERSECURITY) ### Chapter I: Mandate and objectives ## 3 Mandate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 4 Objectives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Chapter II: Tasks ## 5 Development and implementation of Union policy and law . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 6 Capacity-building . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 7 Operational cooperation at Union level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 8 Market, cybersecurity certification, and standardisation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 9 Knowledge and information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 10 Awareness-raising and education . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 11 Research and innovation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 12 International cooperation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Chapter III: Organisation of ENISA ## 13 Structure of ENISA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Section 1: Management Board ## 14 Composition of the Management Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 15 Functions of the Management Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 16 Chairperson of the Management Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 17 Meetings of the Management Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 18 Voting rules of the Management Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Section 2: Executive Board ## 19 Executive Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Section 3: Executive Director ## 20 Duties of the Executive Director . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Section 4: ENISA Advisory Group, Stakeholder Cybersecurity Certification Group and National Liaison Officers Network ## 21 ENISA Advisory Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 22 Stakeholder Cybersecurity Certification Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 23 National Liaison Officers Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Section 5: Operation ## 24 Single programming document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 25 Declaration of interests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 26 Transparency . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 27 Confidentiality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 28 Access to documents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Chapter IV: Establishment and structure of ENISA’s budget ## 29 Establishment of ENISA’s budget . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 30 Structure of ENISA’s budget . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 31 Implementation of ENISA’s budget . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 32 Financial rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 33 Combating fraud . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Chapter V: Staff ## 34 General provisions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 35 Privileges and immunity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 36 Executive Director . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 37 Seconded national experts and other staff . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ### Chapter VI: General provisions concerning ENISA ## 38 Legal status of ENISA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 39 Liability of ENISA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 40 Language arrangements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 41 Protection of personal data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 42 Cooperation with third countries and international organisations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 43 Security rules on the protection of sensitive non-classified information and classified information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 44 Headquarters Agreement and operating conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 45 Administrative control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## Title III: CYBERSECURITY CERTIFICATION FRAMEWORK ## 46 European cybersecurity certification framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 47 The Union rolling work programme for European cybersecurity certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 48 Request for a European cybersecurity certification scheme . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 49 Preparation, adoption and review of a European cybersecurity certification scheme . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 50 Website on European cybersecurity certification schemes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 51 Security objectives of European cybersecurity certification schemes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 52 Assurance levels of European cybersecurity certification schemes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 53 Conformity self-assessment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 54 Elements of European cybersecurity certification schemes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 55 Supplementary cybersecurity information for certified ICT products, ICT services and ICT processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 56 Cybersecurity certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 57 National cybersecurity certification schemes and certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 58 National cybersecurity certification authorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 59 Peer review . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 60 Conformity assessment bodies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 61 Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 62 European Cybersecurity Certification Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 63 Right to lodge a complaint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 64 Right to an effective judicial remedy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 65 Penalties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## Title IV: FINAL PROVISIONS ## 66 Committee procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 67 Evaluation and review . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 68 Repeal and succession . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## 69 Entry into force . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## Signature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ## REQUIREMENTS TO BE MET BY CONFORMITY ASSESSMENT BODIES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . --- Source: https://www.legislation.gov.uk/eur/2019/881 (the official version) Page: https://openlegislation.uk/eu-regulation-2019-881 Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.