Scope: The EUMSS scheme is a forthcoming European cybersecurity certification framework designed to ensure the quality, reliability, and security of Managed Security Services across the Single Market. In response to the European Commission’s 2025 mandate, ENISA is developing a scheme to address the growing reliance on MSSPs and the need for a unified approach amid an increasingly complex cyber-threat landscape. The scheme aims to define a harmonized set of service-oriented requirements that will complement the technical, operational, and organisational obligations imposed on MSSPs under the NIS2 Directive and DORA, reducing fragmentation across Member States. Structured around two-dimension layers, one horizontal layer including minimum requirements for all MSS and various vertical layers that group specific technical requirements tailored to specific MSS domains, EUMSS will support the selection of trusted providers, including for the EU Cybersecurity Reserve, and strengthen resilience, trust, and incident response capabilities across the Union.
When can you apply?: This scheme is currently under development. Make sure to check our website for updates