The EU Commission entrusts ENISA with the management of the financial reserve for cyber-security.

The European Commission has signed an agreement with ENISA, the European Union Agency for Cybersecurity, for the operation and administration of the EU cybersecurity reserve.

The Commission will contribute €36 million from the Digital Europe Programme (DEP) to the functioning of this new initiative under the Cyber Solidarity Act  to strengthen the cyber resilience of the EU and its Member States and, under certain conditions, of third countries associated to the Digital Europe Programme.

The EU cybersecurity reserve will support response to and recovery from significant and large-scale cyber incidents. It will consist of incident response services by trusted service providers, which can be used to help address such cybersecurity incidents addressed by EU Member States, EU institutions, bodies and agencies and, where appropriate, third countries associated to the Digital Europe Programme. The reserve can be used for entities operating in critical and highly critical sectors under the NIS2 Directive, such as the health or energy sectors.

Under this agreement, ENISA will spend the contribution of €36 million over three years on incident response services, the procurement of services for reserves through public tenders and the assessment of requests for services from the reserve.