Sept. 13, 2026 | Order Consultation Closed | Data Governance

On 13 September 2026, the European Union Agency for Cybersecurity (ENISA) closes the consultation on a draft cybersecurity certification scheme for managed security services, until 13 September 2026. The scheme is addressed to providers of managed security services, initially focusing on incident response services. The scheme would introduce mandatory baseline requirements for certification across 3 assurance levels, covering areas such as secure service design, deployment management, and continuous improvement. The scheme would eventually mandate certification for providers under the EU Cybersecurity Reserve.