European Cybersecurity Reserve: EU allocates €36 million to ENISA

Created under the Cyber Solidarity Act, this reserve is intended to provide the EU with shared resources to respond to large-scale cyber incidents.

On August 26, 2025, the European Commission announced that it had entrusted the European Union Agency for Cybersecurity (ENISA) with the management of the “European Cybersecurity Reserve.” Provided for under Article 14 of the Cyber Solidarity Act (adopted in 2024), this entity is designed to equip the European Union with common response capabilities for major cyber incidents.

The European executive has allocated €36 million over three years to ENISA to select and coordinate service providers “deployable in the event of a significant cross-border incident.” The chosen companies may intervene to contain an attack, ensure service continuity, or support recovery after an incident.

If needed, this reserve will be accessible to all critical organizations defined under the NIS2 Directive, as well as to the institutions, agencies, and bodies of the European Union.