European Network and Information Security Agency (ENISA): duration

PURPOSE: to extend the mandate of the European Network and Information Security Agency (ENISA) until September 2013.

LEGISLATIVE ACT: Regulation (EU) No 580/2011 of the European Parliament and of the Council amending Regulation (EC) No 460/2004 establishing the European Network and Information Security Agency as regards its duration.

BACKGROUND: the European Network and Information Security Agency (hereinafter ENISA) was set up in March 2004 for an initial period of five years by Regulation (EC) No 460/2004. Regulation (EC) No 1007/2008extended ENISA’s mandate until March 2012.

From November 2008, a public debate was held on the general direction of European efforts towards increased network and information security, including a debate on the Agency. In line with the Commission’s Better Regulation strategy, and as a contribution to this debate, the Commission launched a public consultation on the objectives for a strengthened network and information security policy at Union level, which ran from November 2008 to January 2009. In December 2009, the debate resulted in a Council Resolution of 18 December 2009 on a collaborative European approach to Network and Information Security.

Taking account of the results of the public debate, it is envisaged to replace Regulation (EC) No 460/2004. It is necessary to extend the duration of the Agency.

CONTENT: with this Regulation, the Council and the European Parliament have decided to amend Regulation (EC) No 460/2004 establishing the European Network and Information Security Agency in order to extend its mandate until 13 September 2013, the time for the European Parliament and the Council to adopt a new regulation to reform ENISA.

ENTRY INTO FORCE: 25.06.2011.