Helping Society: Giving ENISA a boost
In February 2003 the European Commission adopted a proposal to establish a European Network and Information Security Agency ( ENISA). Deloitte in co-operation with empirica carried out a study to take a snapshot of measures taken by public authorities to implement the Council Resolutions 2002/C 43/02 and 2003/C 48/01 on creating a culture of cyber security.
Our study lists and rates the achievements of the EU-25 Member States in creating a culture of network and information security and in ensuring a common approach amongst the member states. For the member states, it also identifies those activities that can act as a model for other countries. For the European Commission, the maturity rating allows to track progress of the member states in implementing the Council Resolutions.
The repository and methodologies for this study had been built such that the ENISA can maintain the information and provide further updates as countries continue to make progress. The full details of the catalogues have been made available in web format.
Three types of sources of information were used:
- past surveys commissioned by the EU and other organisations such as the OECD;
- public information on existing security-related initiatives, and,
- a custom-designed, intensive survey to collect additional information and to confirm public resourcing in order to assess actual progress made by the member states.