Cyber incidents rarely respect national borders, particularly where cloud services, platforms, and managed services are involved. The European Commission’s proposed reforms reflect this reality by strengthening coordination at an EU level and expanding the role of ENISA.
The aim is to improve how cyber threats are identified, shared, and responded to across Member States, while also reducing complexity for businesses.
ENISA as a central coordinator
Under the proposals, ENISA would take on a more prominent operational role. This includes issuing early warnings on major threats, supporting coordinated risk assessments, and assisting with cross-border incident response when requested.
ENISA would also operate shared resources such as the European Vulnerability Database and the EU Cybersecurity Reserve, intended to support affected organisations during serious incidents.
For businesses, this signals a move towards more centralised oversight and greater information sharing between regulators.
Simplifying incident reporting
Alongside ENISA’s expanded role, the proposals link closely with the wider Digital Omnibus initiative. One of the key aims is to simplify incident reporting by introducing a single entry point that can be used to meet obligations across multiple regimes.
This could reduce duplication for organisations currently navigating NIS2, data protection, and sector-specific reporting requirements. However, it also places greater emphasis on having clear internal processes so reports are accurate, timely, and consistent.
Practical considerations for tech businesses
Incident response is not just a technical exercise. It involves legal judgment, customer communications, contractual obligations, and regulatory engagement.
Businesses should be asking whether their incident response plans, contracts, and reporting processes are aligned. Uncertainty during an incident can increase risk and erode trust.
If you would like support reviewing how incident response and reporting obligations fit together in practice, please contact us at info@ethiqs.legal.