Share on LinkedInShare on LinkedIn

ARTICLE · 13 MARCH 2018

ENISA Publishes Report On Developing Cybersecurity Culture Within Organizations

Jones Day
Jones Day
Contributor
Jones Day

Jones Day

Jones Day is a global law firm with more than 2,400 lawyers in 40 offices across five continents....

View firm profile
Explore more from Jones Day

On February 6, ENISA published the Cybersecurity Culture in Organizations report to better understand the dynamics of how cybersecurity culture can be developed and shaped within organizations.

European UnionTechnology
Daniel McLoon
Daniel McLoon
Mauricio Paez
Mauricio Paez
Richard Johnson
Richard Johnson
Jonathon Little
Jonathon Little
Todd McClelland
Todd McClelland
Jeff Rabkin
Jeff Rabkin
Lisa M. Ropple
Lisa M. Ropple
Adam Salter
Adam Salter
Michiru Takahashi
Michiru Takahashi
+4 more
Author LinkedIn connections

On February 6, ENISA published the Cybersecurity Culture in Organizations report to better understand the dynamics of how cybersecurity culture can be developed and shaped within organizations. The report includes experiences gathered from existing cybersecurity programs implemented within organizations and contains good practices, methodological tools, and step-by-step guidance for those seeking to enhance their organization's own cybersecurity culture.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters

Read more about

Related Comparative Guides

See more popular content from

Article

EDPB统一DPIA模板落地：欧盟数据合规正从“程序评估”走向“设计问责”

The European Data Protection Board has released a unified DPIA template for public consultation, marking a significant shift from fragmented national practices to coordinatead EU-wide compliance. This standardization effort aims to transform data protection impact assessments from procedural documents into substantive design accountability tools, requiring organizations to demonstrate not just that they conducted assessments, but that their processing activities can withstand rigorous evaluation.
European UnionTechnology
Jincheng Tongda & Neal
Jincheng Tongda & Neal
Article

The UK Cyber Security And Resilience Bill: What You Need To Know

The UK Government has introduced the Cyber Security and Resilience Bill to address critical gaps in existing cyber security regulations, expanding coverage to data centres, managed service providers, and critical suppliers while granting regulators enhanced enforcement powers. With tightened incident reporting deadlines, turnover-based penalties up to £17 million, and mandatory supply chain resilience measures, organisations across essential services sectors must assess their readiness for compliance
United KingdomTechnology
Browne Jacobson LLP
Browne Jacobson LLP
Article

Using AI In Recruitment: How To Avoid Discrimination Claims

Recruitment is one of the highest-risk areas for AI use in any organisation. It is also one of the areas where AI tools are being adopted most quickly, often with little scrutiny of what they actually do or how they reach their conclusions. The combination of speed, apparent objectivity, and legal exposure makes this a topic that HR professionals and employers cannot afford to approach without a clear understanding of the risks involved.
United KingdomTechnology
Buckles Law
Buckles Law
Article

EU Cyber Resilience Act: First Reporting Obligations Take Effect Today

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products starting September 11, 2026. What vulnerabilities and incidents must be reported, how quickly must notifications be made, and what are the consequences for non-compliance? Understanding these requirements is crucial for manufacturers and their customers as the regulatory landscape for cybersecurity evolves.
European UnionTechnology
Slaughter and May
Slaughter and May
Article

Ninth Circuit Vacates CFAA Injunction Against Perplexity's Comet AI Agent

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...
United StatesMedia, Telecoms, IT, Entertainment
Jones Day
Jones Day
Article

Commission Proposes EU Public Procurement Act

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.
European UnionGovernment, Public Sector
Jones Day
Jones Day
Article

Federal Court Holds New York’s Climate Superfund Law Preempted By CAA

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.
United StatesEnvironment
Jones Day
Jones Day
Article

EU Commission Pushes for Transposition of the EmpCo Directive on Environmental Claims

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.
European UnionConsumer Protection
Jones Day
Jones Day
Article

Amendment To The General Rules Under Mexico’s Anti-Money Laundering Law (LFPIORPI): Key Regulatory Changes Under Acuerdo 115/2026

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho
MexicoGovernment, Public Sector
Jones Day
Jones Day
Article

New EU Guidelines On Abuse Of Dominance: Recalibrated Framework, With Ample Room For Aggressive Enforcement

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market
European UnionAntitrust/Competition Law
Jones Day
Jones Day
Article

Proposed Nondiscrimination Rule For Private School Admissions, Financial Assistance, And Other Programs

The IRS has proposed new regulations that would impose nondiscrimination requirements on private schools seeking to maintain their tax-exempt status under section 501(c)(3). These regulations would prohibit policies discriminating on the basis of race, color, or national or ethnic origin in admissions, financial assistance, and other school programs. The proposed rules raise important questions about how private schools can structure their programs while complying with federal tax law requirements.
United StatesTax
Jones Day
Jones Day