The Agency shall perform the following tasks: (a) support the development of Union policy and law, by: (i) assisting and advising on all matters relating to Union network and information security policy and law; (ii) providing preparatory work, advice and analyses relating to the development and update of Union network and information security policy and law; (iii) analysing publicly available network and information security strategies and promoting their publication; (b) support capability building by: (i) supporting Member States, at their request, in their efforts to develop and improve the prevention, detection and analysis of and the capability to respond to network and information security problems and incidents, and providing them with the necessary knowledge; (ii) promoting and facilitating voluntary cooperation among the Member States and between the Union institutions, bodies, offices and agencies and the Member States in their efforts to prevent, detect and respond to network and information security problems and incidents where these have an impact across borders; (iii) assisting the Union institutions, bodies, offices and agencies in their efforts to develop the prevention, detection and analysis of and the capability to ADB001961EN04-14PP-CH092-14APCFIN-RAS-2013_ENISA-OR.DOC 16.9.2014 2 respond to network and information security problems and incidents, in particular by supporting the operation of a Computer Emergency Response Team (CERT) for them; (iv) supporting the raising of the level of capabilities of national/governmental and Union CERTs, including by promoting dialogue and exchange of information, with a view to ensuring that, with regard to the state of the art, each CERT meets a common set of minimum capabilities and operates according to best practices; (v) supporting the organisation and running of Union network and information security exercises, and, at their request, advising Member States on national exercises; (vi) assisting the Union institutions, bodies, offices and agencies and the Member States in their efforts to collect, analyse and, in line with Member States’ security requirements, disseminate relevant network and information security data; and on the basis of information provided by the Union institutions, bodies, offices and agencies and the Member States in accordance with provisions of Union law and national provisions in compliance with Union law, maintaining the awareness, on the part of the Union institutions, bodies, offices and agencies as well as the Member States of the latest state of network and information security in the Union for their benefit; (vii) supporting the development of a Union early warning mechanism that is complementary to Member States’ mechanisms; (viii) offering network and information security training for relevant public bodies, where appropriate in cooperation with stakeholders; (c) support voluntary cooperation among competent public bodies, and between stakeholders, including universities and research centres in the Union, and support awareness raising, inter alia, by: (i) promoting cooperation between national and governmental CERTs or Computer Security Incident Response Teams (CSIRTs), including the CERT for the Union institutions, bodies, offices and agencies; (ii) promoting the development and sharing of best practices with the aim of attaining an advanced level of network and information security; (iii) facilitating dialogue and efforts to develop and exchange best practices; (iv) promoting best practices in information sharing and awareness raising; (v) supporting the Union institutions, bodies, offices and agencies and, at their request, the Member States and their relevant bodies in organising awareness raising, including at the level of individual users, and other outreach activities to increase network and information security and its visibility by providing best practices and guidelines; (d) support research and development and standardisation, by: (i) facilitating the establishment and take-up of European and international standards for risk management and for the security of electronic products, networks and services; (ii) advising the Union and the Member States on research needs in the area of network and information security with a view to enabling effective responses to current and emerging network and information security risks and threats, including with respect to new and emerging information and communications technologies, and to using risk-prevention technologies effectively; (e) cooperate with Union institutions, bodies, offices and agencies, including those dealing with cybercrime and the protection of privacy and personal data, with a view to addressing issues of common concern, including by: (i) exchanging know-how and best practices; (ii) providing advice on relevant network and information security aspects in order to develop synergies; (f) contribute to the Union’s efforts to cooperate with third countries and international organisations to promote international cooperation on network and ADB001961EN04-14PP-CH092-14APCFIN-RAS-2013_ENISA-OR.DOC 16.9.2014 
Byrån ska utföra följande uppgifter: a) Stödja utvecklingen av unionens politik och unionsrätten genom att i) bistå och ge råd i alla frågor som rör unionens politik för och lagstiftning om nät-och informationssäkerhet, ii) tillhandahålla förberedande arbete, råd och analyser om utveckling och uppdatering av unionens politik för och lagstiftning om nät-och informationssäkerhet, iii) analysera allmänt tillgängliga strategier för nät-och informationssäkerhet och främja offentliggörandet av dem. b) Stödja kapacitetsuppbyggnad genom att i) på begäran stödja medlemsstaterna i deras arbete för att utveckla och förbättra förebyggandet, spårandet och analysen av samt kapaciteten att reagera på problem och incidenter på området nät-och informationssäkerhet, och förse dem med nödvändiga kunskaper, ii) främja och underlätta frivilligt samarbete mellan medlemsstaterna och mellan unionens institutioner, organ och byråer och medlemsstaterna i deras arbete med att förebygga, spåra och reagera på problem och incidenter på området nät-och informationssäkerhet som har gränsöverskridande konsekvenser, iii) bistå unionens institutioner, organ och byråer i deras arbete för att utveckla förebyggandet, spårandet och analysen av samt kapaciteten att reagera på problem och incidenter på området nät-och informationssäkerhet, framför allt genom att stödja driften av en incidenthanteringsorganisation ADB001961SV04-14PP-CH092-14APCFIN-RAS-2013_ENISA-TR.DOC 16.9.2014