ENISA Opens Survey for 2027 NIS360 Cybersecurity Assessment

Summary
ENISA has opened data collection for its 2027 NIS360 assessment of cybersecurity maturity and criticality in high-criticality sectors. The survey closes on 30 October 2026.
Key points
- The assessment uses separate structured questionnaires for private-sector entities and national authorities.
- Responses are analysed in aggregate form to ensure confidentiality.
- Registered entities can receive a benchmarking report and compare themselves with peers.
- The NIS360 report assesses sectors using legislation, company preparedness, authority capacity and sectoral ecosystem effectiveness.
- ENISA plans to publish the 2027 report in 2027.
Article Details
- Event Type
- Launch of data collection and surveys for the NIS360 2027 assessment cycle.
- Impact
- ENISA is collecting responses from national authorities and in-scope entities to assess sectoral cybersecurity maturity and criticality. The results will inform the NIS360 report scheduled for publication in 2027; registered entities can also receive benchmarking reports.