ENISA Article 14 Requests

Report on 2018 requests

FINAL DECEMBER 2018 About ENISA

The European Union Agency for Network and Information Security (ENISA) is a centre of network and information security expertise for the EU, its member states, the private sector and Europe’s citizens. ENISA works with these groups to develop advice and recommendations on good practice in information security. It assists EU member states in implementing relevant EU legislation and works to improve the resilience of Europe’s critical information infrastructure and networks. ENISA seeks to enhance existing expertise in EU member states by supporting the development of cross-border communities committed to improving network and information security throughout the EU. More information about ENISA and its work can be found at www.enisa.europa.eu.

Contact

For contacting the authors or for media enquiries about this paper, please use press@enisa.europa.eu.

Legal notice

Notice must be taken that this publication represents the views and interpretations of the authors and editors, unless stated otherwise. This publication should not be construed to be a legal action of ENISA or the ENISA bodies unless adopted pursuant to the Regulation (EU) No 526/2013. This publication does not necessarily represent state-of the-art and ENISA may update it from time to time.

Third-party sources are quoted as appropriate. ENISA is not responsible for the content of the external sources including external websites referenced in this publication.

This publication is intended for information purposes only. It must be accessible free of charge. Neither ENISA nor any person acting on its behalf is responsible for the use that might be made of the information contained in this publication.

Copyright Notice

© European Union Agency for Network and Information Security (ENISA), 2018 Reproduction is authorised provided the source is acknowledged.

ISBN: 978-92-9204-274-5, DOI: 10.2824/06727

Table of Contents

ENISA Article 14 Requests 4

Introduction 4

Overview of Article 14 requests in 2017-2018 4

Table of requests 4

ENISA Article 14 Requests Introduction

This concise report provides an overview of the requests to the Agency according to article 14 of Regulation (EU) No 526/2013. Information contained in this report is accurate as on 03 December 2018.

Overview of Article 14 requests in 2017-2018

Key figures in this report are the following:

Number of new requests: 20 17 -15% Number of requests in progress: 3 12 +300% Number of requests completed: 19 5 -74% Number of requests received 2018 to be initiated 2019 0 Effort in person days: 281,2 701 +149% (1) (2) Effort in Euros (FTE including overhead) €157.209,92 €405.178 +157% Direct Cost : €117.901,37 €33.348 -72% Total Cost: €275.111,29 €438.667 +59% (1) Mean full time equivalent (FTE) costs are calculated on the basis of the total budget consumption over 201,6 actual working days p.a., to support salaries and overhead for staff in service in the reference year (65,28 FTEs in 2018 including TA, CA and SNE). (2) Based on statistical analysis at the end of 2018 the use Cost of a person-day in 2018 (including overheads) is €578. (3) Mission costs, other direct expenses linked to request are included in this budget estimate.

The effort in person days was provided by staff from the Core Operations Department – there were no additional staff costs incurred. Direct costs were provided out of the operational part of the budget (Title 3 appropriations).

Table of requests

The table of requests outlines all current ongoing requests per country. The budget indicated is the direct budget concerning mission costs and other direct expenses.

Origin Institution Title Effort in Effort in € Budget Status person days

Request for assistance on 1 Austria CERT.at 2,5PD €1445 €0 In progress Incident reporting

Institutional map and

2 Austria Federal Chancellery cybersecurity capabilities in 10PDs €5780 €4000 In progress

MS

3 Cyprus National CSIRT Support CSIRT CY 3PDs €1734 €2000 In progress

EU Cooperation between EASA 4 EASA 20PDs €11560 €4000 In progress Institution and ENISA

EU European Union Cooperation between ERA & 5 8PDs €4624 €1500 In progress Institution Agency for Railways ENISA for Rail Cybersecurity

EU-NATO Parallel and European 6 EU-NATO Coordinated Exercise (EU- 60PDs €34680 €4949,57 In progress Commission PACE 2018)

European Sector specific activities DG 7 DG ENER/COM 15PDs €8670 €1000 In progress Commission ENER in cyber security

Support DG GROW for IT European 8 EC - DG GROW Security requirements of 5PDs €2890 €1800 In progress Commission Medical Devices Regulations

Support in the activities of European 9 EC - DG SANTE the 3rd Joint Action on 2PDs €1156 €0 In progress Commission eHealth

Cyber Education Training EU 10 EEAS Exercise and Evaluation €0 In progress Institution (ETEE) Platform

Request to support eu-LISA EU 11 EU-LISA exercise (it also includes 502.5PDs* €290,445 €10000 In progress Institution training)

Origin Institution Title Effort in Effort in € Budget Status person days

Consultation in the area of 12 Poland NASK cybersecurity certification in 5PDs €2890 €1734,49 Complete EU Cooperation Group work on 13 Estonia Ria 7PDs €4046 €2000 Complete cross-border dependencies Request for assistance on 14 Bulgaria Bulgarian Presidency 50PDs €28900 0€ Complete Cybersecurity Taxonomy Ministry of Digital Request NISD 15 Poland 0,5PDs €289 0€ Complete Affairs Implementation National Cyber Security Request on Industrial 16 Greece 0,5PDs €289 0€ In Progress Authority of Greece systems security initiatives EU Request EUROSystem red 17 ECB 10PDs €5780 364,93€ Complete Institution team testing framework

*The Agency was compensated for the 402 person days for this project.

ENISA

European Union Agency for Network and Information Security 1 Vasilissis Sofias Marousi 151 24, Attiki, Greece

Heraklion Office

Science and Technology Park of Crete (ITE) Vassilika Vouton, 700 13, Heraklion, Greece

Catalogue Number: TP-03-18-538-EN-N

1 Vasilissis Sofias Str, Maroussi 151 24, Attiki, ISBN: 978-92-9204-274-5 DOI: 10.2824/06727 Greece Tel: +30 28 14 40 9710 info@enisa.europa.eu www.enisa.europa.eu