Resources made available to the Agency

Competences of the Agency (Regulation (EC) No 460/2004 of the European Parliament and of the Council)

The representatives of the Member State governments have, by common agreement, adopted a statement on the creation of a European Network and Information Security Agency. The Agency should operate as a point of reference and establish confidence by virtue of its independence, the quality of the advice it delivers and the information it disseminates, the transparency of its procedures and methods of operating, and its diligence in performing the tasks assigned to it. (Council Decision of 19 February 2004, taken on the basis of Article 251 of the Treaty).

Objectives — The Agency enhances the capability of the Community, the Member States and the business community to prevent, address and to respond to network and information security problems. — The Agency provides assistance and delivers advice to the Commission and the Member States on issues related to network and information security falling within its competencies. — The Agency develops a high level of expertise and uses this expertise to stimulate broad cooperation between actors from the public and private sectors. — The Agency assists the Commission, where called upon, in developing Community legislation in the field of network and information security.

Tasks The Agency: (a) collects information on current and emerging risks that could produce an impact on electronic communications networks; (b) provides the European Parliament, the Commission, European bodies or competent national bodies with advice, and assistance; (c) enhances cooperation between actors in its field; (d) facilitates cooperation on common methodologies to address network and information security issues; (e) contributes to awareness raising on network and information security issues for all users; (f) assists the Commission and the Member States in relations with industry; (g) tracks standards; (h) advises the Commission on research in the area of network and information; (i) promotes risk assessment activities, on prevention solutions; (j) contributes to cooperation with third countries.

1 — Management Board 1. It is composed of one representative of each Member State, three representatives appointed by the Commission, and three representatives, without the right to vote, each of whom represents one of the following groups: (a) information and communication technologies industry; (b) consumer groups; (c) academic experts. 2. Board members may be replaced by alternates. 2 — Executive Director 1. The Agency is managed by its Executive Director, who is independent in the performance of his duties. 2. The Executive Director is appointed for a term of office of up to five years. 3 — External audit Court of Auditors. 4 — Internal audit The Commission’s Internal Auditor. 5 — Discharge authority Parliament acting on recommendation by the Council.

Budget 8,4 (8,3) million euro Staff at 31 December 2008 — 44 (44) posts according to the establishment plan. Posts occupied 39 (42); — Other posts: 12 (11) Contract Staff, 5 (2) SNEs, 2 (2) Trainees. Total staff: 58 (56) operational: 38 (31) administrative and policy: 20 (25)