2022 discharge: European Union Agency for Cybersecurity (ENISA)

The European Parliament decided to grant discharge to the Executive Director of ENISA (European Union Agency for Cyber Security) in respect of the implementation of the Agency's budget for the financial year 2022 and to approve the closure of the accounts for that year.

Noting that the Court of Auditors stated that it had obtained reasonable assurance that the Agency's annual accounts for the financial year 2022 were reliable and that the underlying transactions were legal and regular, Parliament adopted, by 532 votes to 39, with 34 abstentions, a resolution containing a series of recommendations which form an integral part of the discharge decision and which complement the general recommendations set out in the resolution on the performance, financial management and control of EU agencies.

Agency’s financial statements

ENISA's final budget for the year 2022 was EUR 39 207 625 representing an increase of 67.03 % compared to 2021.

Budgetary and financial management

Budget monitoring efforts during the financial year 2022 resulted in a budget implementation of current year commitment appropriations rate of 99.93 %, representing an increase of 0.42 % compared to 2021. Payment appropriations execution rate was 52.02 % representing a decrease of 25.38 % compared to 2021.

Other observations

Parliament also made a series of observations concerning performance, staff policy, internal controls and digitalisation.

In particular, it noted that:

- the Agency implemented 100 % of its work programme in 2022;

- the Agency piloted the Union heat map, which aimed to provide a quick overview of cyber incidents and cyber events affecting Union’s critical sectors as a result of the cyber activity related to the Russian war of aggression against Ukraine;

- on 31 December 2022, the establishment plan was 89.02 % implemented, with 73 temporary agents appointed out of 82 authorised under the Union budget (compared to 76 authorised posts in 2021);

- improvements should be made concerning the lack of gender and geographical balance;

- the Agency should develop greater visibility in the media, internet, and social media in order to make its work known to the citizens;

- the assessment of the Agency's internal controls indicates reasonable assurance in facilitating effective and efficient operations, ensuring quality reporting, and compliance with regulations but some improvements are needed in relation to certain principles to increase effectiveness and ensure proper implementation of the internal controls;

- the digitalisation of procedures should be accelerated.