Competent entities#

Orientation stub. Mandates and organisational charts change. Treat the links as a map of relevance, not a complete competence catalogue. ⚠️ VERIFY current DG/agency remits against official sites before citing them.

EU cybersecurity legislation is prepared, supervised and enforced by a mix of Commission directorates-general (DGs), EU agencies, and national competent authorities. The table below is a starting map for this site.

Commission DGs (illustrative)#

DG	Focus (short)	Related instruments on this site
CNECT — Communications Networks, Content & Technology	Digital policy, cybersecurity, data	NIS2, Cybersecurity Act, Cyber Solidarity Act
FISMA — Financial Stability, Financial Services & Capital Markets Union	Banking, markets, digital finance	DORA
GROW — Internal Market, Industry, Entrepreneurship & SMEs	Product rules, single market	Cyber Resilience Act, RED cyber
HOME — Migration & Home Affairs	Critical entities, security	CER Directive
JUST — Justice & Consumers	Some data-protection and consumer interfaces	GDPR security

EU agencies & bodies (illustrative)#

Body	Role (short)	Related instruments
ENISA	EU cybersecurity agency; certification support	Cybersecurity Act, CSA2
EDPB	European Data Protection Board	GDPR security
ESAs (EBA, ESMA, EIOPA)	Financial supervisory authorities; DORA CTPPs	DORA

National competent authorities#

Directives (and some regulations) leave designation of national competent authorities, CSIRTs, market-surveillance authorities and data-protection authorities to Member States. This site tracks NIS2 transposition under Countries.

Sources#

• European Commission — departments and executive agencies
• EU agencies and bodies
• Instrument deep dives under Regulations on this site