Skills and competences (for companies)

ENISA boosts capacity-building in the private sector by offering a structured approach for skills development along with training opportunities.

Recognising the need to boost skills development and effectively address the skills gap in Europe, ENISA has developed the European Cybersecurity Skills Framework (ECSF). ECSF is a cohesive framework that establishes a common understanding regarding the roles and competences of cybersecurity professionals. Based on a categorisation of the cybersecurity workforce into 12 distinct professional profiles, it works as a reference point and practical tool to identify and articulate the tasks, competences, and knowledge associated with key cybersecurity roles. The ECSF has become an indispensable resource for organisations, professionals, and the academia throughout Europe.

Throughout the years, ENISA has been involved in organising diverse cybersecurity exercises at the local, international, and EU-wide levels. The Agency also develops unique cyber exercise solutions, enabling stakeholders to tailor scenarios to their specific needs and even host their own exercises.

One of the most prominent and widely recognised ENISA’s cybersecurity initiatives is the Cyber Europe programme. Every two years, Cyber Europe attracts leading cybersecurity experts from the EU and EFTA's public and private sectors, as well as European Institutions, Bodies, and Agencies, to strengthen their technical and operational capabilities.

The approach of testing, identifying gaps and enhance the skills of IT professionals at the operational level is core to ENISA’s mission. Trainings are key to building technical and operational security competencies and resilience.
ENISA introduced its ‘Cyber Security Training’ material in 2008. A “Train-the-Trainer” approach was employed to support the ENISA stakeholder community while additionally, the training material was provided as a free download for strictly non-commercial use.

This training materials (handbooks and virtual machines) are no longer available and have been archived. The feedback received though throughout the years indicates that the training material has been proved of help for many individuals to further develop their cyber skills and competencies.