Technical Report EU Agency for Cybersecurity
NIS Investments 2025
ENISA NIS Investments Team*(European Union Agency for Cybersecurity (ENISA))
December 8, 2025
Abstract
This study explores how cybersecurity policy implementation — particularly the NIS2 Directive — affects organisational investments, resources, and operations across EU entities. It surveys cybersecurity spending patterns, staffing levels, incident response budgets, and compliance costs across sectors designated as essential and important under NIS2. The report provides benchmarking data for CISOs and policymakers to assess the adequacy of cybersecurity investment across the European single market.
Citations
0
Citation data is scholarly publication metadata. CUEBES does not count page views or file downloads as readership analytics.
Keywords
NIS2 Directivecybersecurity investmentcybersecurity spendingcritical infrastructurecomplianceEU regulation
Topics
Digital SovereigntyCybersecurity
Links
License
© ENISA 2025