Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is the European counterpart organization to USA's NIST?

I want to check the European best practices and guidelines on computer security. Does anyone know if this organization exists, and if there are available publications?

I need to check the policy role of some firewall but in general I want to know what is the de-facto standard organization to watch.

I live in Italy.

share|improve this question
up vote 5 down vote accepted

The appropriate organisation for Europe is ENISA, however as Rory points out there are also organisations specific to the sovereign states, which all have their own legislation regarding data protection and information security.

share|improve this answer
As i see in the ENISA's web site i cant for example find any specific stuff about firewall, i think the ENISA is far away from the 'maturity' of NIST. thanks – boos Feb 24 '11 at 13:30

There are a range of organisations throughout Europe - so if you want a specific one, you should state which country is of interest. Also, NIST produce guidelines which are generally appropriate anywhere so if you currently use them, they will give you a good basis.

You should look at ISO:IEC 27002 (and in fact the entire 27000 range) as well as the Data Protection Act 1998 (or it's local equivalent) as these are good guidelines.

If you can give more information as to what you are protecting and what country you are in there may be more specific documents we can point you at.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.