Resources made available to the Agency in 2009

(Regulation (EC) No 460/2004 of the European Parliament and of the Council)

The representatives of the Member State governments have, by common agreement, adopted a statement on the creation of a European Network and Information Security Agency. The Agency should operate as a point of reference and establish confidence by virtue of its independence, the quality of the advice it delivers and the information it disseminates, the transparency of its procedures and methods of operating, and its diligence in performing the tasks assigned to it. (Council Decision of 19 February 2004, taken on the basis of the TFEU).

Objectives — The Agency enhances the capability of the Union, the Member States and the business Union to prevent, address and respond to network and information security problems. The Agency provides assistance and delivers advice to the Commission and the Member States on issues related to network and information security falling within its competencies. — The Agency develops a high level of expertise and uses this expertise to stimulate broad cooperation between actors from the public and private sectors.

Tasks The Agency: (a) collects information on current and emerging risks that could produce an impact on electronic communications networks; (b) provides the European Parliament, the Commission and European bodies or competent national bodies with advice and assistance; (c) enhances cooperation between actors in its field; (d) facilitates cooperation on common methodologies to address network and information security issues; (e) contributes to awareness-raising on network and information security issues for all users; (f) assists the Commission and the Member States in relations with industry; (g) tracks standards; (h) advises the Commission on research in the area of network and information; (i) promotes risk assessment activities on prevention solutions; (j) contributes to cooperation with third countries.

1 — Management Board The Management Board shall be composed of one representative of each Member State, three representatives appointed by the Commission, as well as three representatives, proposed by the Commission and appointed by the Council, without the right to vote, each of whom represents one of the following groups: (a) information and communication technologies industry; (b) consumer groups; (c) academic experts in network and information security. 2 — Executive Director 1. The Agency is managed by its Executive Director, who is independent in the performance of his duties. 2. The Executive Director is appointed for a term of office of up to five years. 3 — External audit Court of Auditors. 4 — Internal audit Internal audit service of the European Commission. 5 — Discharge authority Parliament, acting on a recommendation from the Council.

Budget Total revenue 2009 (2008): 8,1 million euro (8,4 million euro) T1: Staff Available: 5,2 million euro (4,7 million euro) T2: Buildings, Equipment and Miscellaneous Operating Expenditure Available: 0,5 million euro (0,7 million euro) T3: Operating Expenditure Available: 2,5 million euro (2,9 million euro) Staff at 31 December 2009 — 44 (44) posts according to the establishment plan. Posts occupied 43 (39); — Other posts: — 9 (12) Contract Staff, — 4 (5) SNEs, — 1 (2) Trainee Total staff: 57 (58) Allocated to operational: 39,5 (15) (38) administrative and IT: 18,5 (20)