EU Cybersecurity Act

EU Cybersecurity Act (Regulation EU 2019/881) · European Commission / ENISA · Official site

EU regulation strengthening ENISA's mandate and establishing the EU cybersecurity certification framework for ICT products, services, and processes. The EUCC scheme (product certification) is active; the EUCS cloud scheme remains in draft, is not adopted, and no certificates are issued under it.

Timeline

EU proposes Cybersecurity Act 2 to update ENISA mandate, certification framework, and ICT supply chain security rules New document eu

The European Commission has proposed a new regulation (Cybersecurity Act 2) to replace the current Regulation (EU) 2019/881 on ENISA and cybersecurity certification. The proposal aims to strengthen E…

Source 2026-01-20

EU proposes amendments to NIS 2 Directive for simplification and alignment with Cybersecurity Act Amendment eu

The European Commission has proposed amendments to Directive (EU) 2022/2555 (NIS 2 Directive) to introduce simplification measures and ensure alignment with the proposed Cybersecurity Act 2. This pro…

Source 2026-01-20 Action required

Regulation (EU) 2025/37 of the European Parliament and of the Council of 19 December 2024 amending Regulation (EU) 2019/881 as regards managed security services Amendment eu

Amendment to the EU Cybersecurity Act (Regulation 2019/881) introducing provisions on managed security services. The amendment enters into force on 2025-02-04.

Source 2024-12-19 Effective 2025-02-04 Action required

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL amending Regulation (EU) 2019/881 as regards managed security services Amendment eu

A legislative proposal to amend Regulation (EU) 2019/881 (the EU Cybersecurity Act) to introduce provisions regarding managed security services. The proposal is currently under consideration and has …

Source 2023-04-18

Monitoring

Watched by 3 official sources. Watching since 7 September 2026. Last checked 12 minutes ago.