How will the EU Cybersecurity Reserve be funded?

ENISA has published guidance clarifying the funding mechanism for the new EU Cybersecurity Reserve, a key operational capability established under the NIS2 Directive. The Reserve is designed to provide rapid, expert assistance to member states and critical entities during significant cyber incidents. Its funding will be integrated into the regular EU budgetary process, primarily supported through the Digital Europe Programme, with potential additional allocations from other EU funds.

The Reserve directly supports entities within the scope of the NIS2 Directive, including essential and important entities across sectors like energy, transport, banking, healthcare, and digital infrastructure. While the funding obligation falls on the EU and member states, the availability of this resource affects all in-scope organizations, as they may request or benefit from its deployment during large-scale cyber crises.

Compliance teams should note this operationalization of NIS2 support structures. The next step is to integrate the potential availability of the Cybersecurity Reserve into internal incident response plans and crisis management procedures. Teams should monitor national competent authorities for details on how to request assistance and continue to ensure their own organization's compliance with NIS2 mandates, including incident reporting and risk management.