The Internal Market responsibility is a shared competence between the Union and the Member States (Article 4(2)(a) TFEU).

The European Parliament and the Council shall, acting in accordance with the ordinary legislative procedure and after consulting the Economic and Social Committee, adopt the measures for the approximation of the provisions laid down by law, regulation or administrative action in Member States which have as their object the establishment and functioning of the internal market.

(Article 114 of the Treaty on the Functioning of the European Union)

to express independently its own conclusions, orientations and to give advice on matters within its scope and objectives.

to contribute to cooperation with third countries and international organisations;

to advise the Commission on research in the area of network and information security and the use of risk prevention technologies;

to track the development of standards for products and services on network and information security;

to assist the Commission and the Member States in their dialogue with industry;

to contribute to awareness-raising on network and information security issues for all users by, inter alia, promoting exchanges of current best practices, including methods of alerting users and seeking synergy in public and private sector initiatives;

to provide the European Parliament, the Commission and European bodies or competent national bodies with advice and assistance;

To collect information on current and emerging risks that could produce an impact on electronic communications networks;

The Agency shall assist the Commission, where called upon, in the technical preparatory work for updating and developing Community legislation in the field of network and information security.

The Agency shall develop a high level of expertise and use this expertise to stimulate broad cooperation between actors from the public and private sectors.

The Agency shall provide assistance and deliver advice to the Commission and the Member States on issues related to network and information security falling within its competencies.

The Agency shall enhance the capability of the Union, the Member States and the business community to prevent, address and respond to network and information security problems.

(Regulation (EC) No 460/2004 of the European Parliament and of the Council)

Appointed by the Management Board, from a list of candidates proposed by the European Commission and following a hearing in the European Parliament, for a term of five years.

Following an open call, the Members are selected by the Executive Director, who after informing the Management Board of his decision, appoints the selected applicants ad personam for a term of office of 2,5 years.

30 high-level experts representing the relevant stakeholders, such as the information and communication technologies (ICT) industry, ICT user organisations and academic experts in network and information security.

One representative from each Member State, three representatives appointed by the Commission, as well as three representatives, proposed by the Commission and appointed by the Council, without the right to vote, each of whom represents one of the following groups:

Products and services in 2012 (2011)