Data Collection Framework

Reaching a “Single European Information Space” by 2010 (as indicated in the i2010 initiative) depends, among other things, on how well Europe can secure its communication networks.

Measuring the success of this is challenging, hence the Council’s “Strategy for a Secure Information Society in Europe” calls for multi-stakeholder co-operation to develop appropriate statistical indicators.

This strategy was published at a time when ENISA was already examining whether it is feasible to create a data collection framework for security incidents and consumer confidence, in response to a request from the European Commission. This report is the response to this request.

This report has been compiled after conducting a comprehensive survey of all European parties who potentially have something to contribute, most notably Managed Security Service Providers, Computer Emergency Response Teams, national security organisations, statistics offices (e.g. Eurostat), IT security
vendors, communication service providers, universities and other researchers. The survey was followed by presentations and discussions, extensive web research and finally a workshop, where ENISA invited potential partners, presented results of this feasibility study and initiated a partnership for datasharing.

This initiative is now called “Partnership for ICT Security Incident and Consumer Confidence Information Exchange (PISCE)”. Its purpose is to create an exchange of information on IT security and consumer confidence trend data. A primary goal of this partnership is to encourage policy- and
decision-makers to become involved.