ENISA Launches Public Consultation for EUMSS Cybersecurity Certification Scheme

ENISA has initiated a public consultation on the draft European Union Managed Security Services (EUMSS) cybersecurity certification scheme. This scheme, developed at the request of the European Commission, aims to standardize the delivery of managed security services across EU Member States. ENISA's findings indicate a shift in cybersecurity investment towards outsourced services rather than expanding internal teams. The consultation invites feedback from stakeholders until September 13, 2026. The EUMSS scheme is designed to provide a harmonized framework that supports cross-border service provision and enhances Union-level crisis response capabilities. The draft builds on existing European cybersecurity practices and proposes a layered approach to certification, focusing on baseline requirements and service-specific criteria. The ongoing development of the scheme is expected to culminate in an Implementing Act by the European Commission.

Key Points: • ENISA has launched a public consultation for the EUMSS cybersecurity certification scheme. • The scheme aims to standardize managed security services across EU Member States. • Stakeholders can provide feedback until September 13, 2026.