The agency responsible for high level cybersecurity across the EU.

Under the Cyber Resilience Act, manufacturers must report actively exploited vulnerabilities in their lighting products to ENISA within 24 hours of identification.