Filters
Topics
Reclaiming Software Engineering as the Enabling Technology for the Digital Age
Tanja E. J. Vos, Tijs van der Storm, Alexander Serebrenik, Lionel Briand, Roberto Di Cosmo, Jean-Michel Bruel, Benoît Combemale
Software engineering is the invisible infrastructure of the digital age. The authors contend that while breakthroughs in AI, quantum computing, and cybersecurity depend on software engineering advances, the discipline receives insufficient recognition in European policy frameworks. Major programmes...
Large Language Models as a (Bad) Security Norm in the Context of Regulation and Compliance
Kaspar Rosager Ludvigsen
This paper examines the risks associated with deploying large language models in cybersecurity infrastructure development. The author reviews established cybersecurity norms and EU legal requirements, then analyses how LLM weaknesses conflict with both best practices and regulatory obligations. Key...
NIS Investments 2025
ENISA NIS Investments Team
This study explores how cybersecurity policy implementation — particularly the NIS2 Directive — affects organisational investments, resources, and operations across EU entities. It surveys cybersecurity spending patterns, staffing levels, incident response budgets, and compliance costs across sector...
ENISA Threat Landscape 2025
ENISA Threat Landscape Team
The annual ENISA Threat Landscape report analyses 4,875 cybersecurity incidents over a period spanning from July 2024 to June 2025. Using a threat-centric methodology with contextual analysis, it identifies the most prominent cyber threats facing the EU, including ransomware, state-sponsored attacks...
AI, Digital Platforms, and the New Systemic Risk
Philipp Hacker, Atoosa Kasirzadeh, Lilian Edwards
This paper develops a rigorous framework for understanding systemic risk in AI, platform, and hybrid system governance by drawing from finance, complex systems theory, climate change, and cybersecurity. The authors argue that recent legislation including the EU's AI Act and Digital Services Act invo...
Cyber Resilience Act Requirements Standards Mapping
J.L. Hernandez Ramos, G. Karopoulos, I. Nai Fovino
This analysis identifies relevant cybersecurity standards addressing each requirement in the proposed Cyber Resilience Act (CRA). The study systematically evaluates existing standard coverage from ISO, IEC, ETSI, and CEN/CENELEC, and highlights potential gaps where additional standardisation work ma...