- What: ENISA updates framework to enhance EU member state cybersecurity capabilities
- Impact: Improved methodology for assessing and improving national cybersecurity strategies
Risk Assessments/Management , Critical Infrastructure Security , Government security ENISA updates framework to enhance EU member state cybersecurity capabilities April 24, 2026 Share By SC Staff As detailed in The Cyber Express, the European Union Agency for Cybersecurity (ENISA) has released the updated National Capabilities Assessment Framework (NCAF 2.0). This revised framework provides EU Member States with a structured methodology to evaluate and improve their national cybersecurity capabilities and the maturity of their National Cybersecurity Strategies. NCAF 2.0 is a refined maturity model designed to assess cybersecurity efforts across various development stages, evaluating both the process and outcomes of national strategies. Key updates include new descriptions of maturity levels reflecting dynamic challenges, updated goals addressing emerging threats and aligning with evolving EU policies like the NIS2 Directive, and a comprehensive set of questions for assessing governance, risk management, and incident response. The framework helps countries identify strengths and weaknesses, enabling targeted improvements and alignment with EU cybersecurity standards. Policymakers, cybersecurity experts, and government officials can use NCAF 2.0 as a self-assessment tool to make data-driven decisions and foster collaboration among Member States. Source: The Cyber Express SC Staff Related AI/ML Why predictive resilience based on Agentic AI must anchor the National Cyber Strategy Jonathan Trull April 21, 2026 Here’s how a risk operations center model promises to help teams stay one step ahead of the attackers. AI/ML AI browser extensions more likely to have known vulnerabilities, report says Laura French April 13, 2026 AI extensions are also more likely to have cookie, scripting and tabs permissions. Phishing From awareness to action: Closing the human risk gap in cybersecurity Paul Wagenseil April 10, 2026 Why organizations must adopt unified platforms that connect behavioral insights, technical controls, and governance frameworks. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Business Impact Analysis (BIA) British Standard 7799 Chain of Custody Competitive Intelligence Data Custodian Due Care Due Diligence Risk Risk Assessment You can skip this ad in 5 seconds