The European Union Agency for Cybersecurity (ENISA) has launched a public consultation on the draft European Union Cybersecurity Certification Scheme for Managed Security Services (EUMSS).
The consultation provides an opportunity for public authorities, Managed Security Service Providers (MSSPs), industry representatives, conformity assessment bodies, academia and other interested stakeholders to review the proposed scheme and submit comments before its finalisation.
What is the EUMSS?
The European Union Cybersecurity Certification Scheme for Managed Security Services (EUMSS) is being developed under the EU Cybersecurity Act to establish a harmonised European certification framework for Managed Security Services.
The scheme aims to increase trust in cybersecurity services by defining common security requirements and assessment criteria across the European Union. Once adopted, it will support organisations in identifying trustworthy service providers while contributing to a more consistent and resilient European cybersecurity market. The development of the scheme follows the amendment of the Cybersecurity Act, which introduced the possibility of establishing European cybersecurity certification schemes for Managed Security Services.
Why does it matter?
Managed Security Service Providers play an increasingly important role in protecting organisations against evolving cyber threats by delivering services such as:
- Security monitoring and incident detection
- Incident response
- Penetration testing
- Security audits
- Cybersecurity consultancy
As organisations continue to outsource critical cybersecurity functions, a common European certification framework will help strengthen confidence in the quality, security and reliability of these services while supporting the Digital Single Market.
Have Your Say
ENISA encourages all interested stakeholders to participate in the public consultation by reviewing the draft certification scheme and submitting their feedback.
Stakeholder input will play an important role in refining the scheme and ensuring it reflects the needs of both industry and public authorities before its adoption.
Further information, the consultation documents and submission details are available on the ENISA Certification website.
Consultation page: ENISA Public Consultation on the Draft EU Certification Scheme for Managed Security Services