meta_id 3287658

On July 1, 2026, the European Union Agency for Cybersecurity (ENISA) launched data collection for the NIS360 2027 report, following publication of the 2026 edition in May 2026. The agency is inviting both national authorities and high criticality entities operating under the Network and Information Systems 2 Directive (NIS2) to participate in structured questionnaires designed to assess cybersecurity maturity across critical sectors. The NIS360 survey combines insights from the private sector with perspectives from national authorities to evaluate sectoral cybersecurity maturity and criticality. ENISA has simplified the survey for this cycle, introducing a user-friendly interface and new benchmarking features. Participating entities can now receive individual benchmarking reports, compare their performance against peers, and identify areas for improvement. All responses are analysed in aggregate form to ensure confidentiality and maintain year-on-year comparability of data. The NIS360 assessment framework evaluates sector maturity across four dimensions: legislation and its effectiveness, company preparedness, national authority institutional capacity, and sectoral ecosystem structures. This evidence-informed methodology enables ENISA to provide comparative sector overviews and detailed analyses to help identify gaps and prioritise resource allocation. Stakeholders must submit responses by October 30, 2026, via the online survey platform at https://enisa.enablor.dk/auth/register/survey/eca2ce47cdd14826b095192fbdc15edc?lang=en. The completed NIS360 2027 report will be published in 2027. For further information, stakeholders can contact NIS360@enisa.europa.eu.