Draft candidate EUMSS Scheme v1.1 for Public Review

This publication is a draft version of the EUMSS candidate scheme (European Cybersecurity Certification Scheme for Managed Security services) in accordance with Article 48.2 of Regulation (EU) 2019/881 (Cybersecurity Act).

ENISA has set up an Ad Hoc Working Group (AHWG) to work on the preparation of the candidate scheme, as part of the European Cybersecurity Certification Framework. This is a draft version to be used as basis for a public review. The objective of the review is to validate the principles, general organization and security requirements of the proposed scheme, and to gather feedback on the proposed elements of the draft candidate scheme and on its annexes.

Ongoing Public Review

There is an ongoing public review on this draft candidate scheme, for which we ask you to answer the question in the following survey:

Access the survey

The survey will remain open for answers until Sunday 13 of September 2026 (included).

An Excel comments grid is available to support the submission of structured and detailed feedback and may be uploaded through the EU Survey. Wherever possible, respondents are encouraged to accompany their comments with a specific drafting proposal. Concrete text proposals will facilitate discussion within the Ad Hoc Working Group and support the review and validation of possible amendments to the draft.

General comments are also welcome. However, comments that include proposed wording or a clearly defined amendment may be addressed with higher priority, as they can be more readily assessed and discussed.

Respondents wishing to provide more extensive comments, including documents with tracked changes, formatting or styles, may also upload an additional file at the end of the survey.

For any difficulties submitting comments or accessing the survey, please contact EUMSS_PublicConsultationenisa [dot] europa [dot] eu (EUMSS_PublicConsultation[at]enisa[dot]europa[dot]eu) .