Titled ‘2026 Report on the State of Cybersecurity in the Union,’ the report introduces the EU Cybersecurity Index, which puts the bloc’s average cybersecurity maturity at 71.53 points on a 100-point scale.
ENISA provided an overview of the EU cybersecurity threat and policy landscape, followed by an aggregated assessment of the maturity of cybersecurity capabilities across the Union, before setting out the main directions in which the EU cybersecurity ecosystem is heading.
They also cover the adoption of a comprehensive operational capacity for crises, reflecting developments linked to the EU Cybersecurity Blueprint and the maturity of crisis-handling structures at both EU and national levels.
The Cyber Resilience Act becomes fully applicable on Dec. 11, 2027, with reporting obligations and conformity assessment body notifications applying from Sept. 11 this year.
The Cyber Solidarity Act, in force since February 2025, is being operationalised through the European Cybersecurity Alert System, the Cybersecurity Emergency Mechanism and the EU Cybersecurity Reserve.