The omnipresence of information systems across all sectors and in human daily life leaves society exposed to numerous types of cyber risks that might have profound impact not only on the digital sphere, but also on the off-line world. Revelations of surveillance activities and cyber incidents have left no doubt about the vulnerability of Europe, both in its use of information and communication technologies (ICT) and in its own supply of technologies and solutions

In September 2017, the Commission adopted a cybersecurity package with new initiatives to further improve EU cyber-resilience, deterrence and defence. As part of these, the Commission tabled a legislative proposal to strengthen the EU Agency for Network Information Security (ENISA).