International Information System Security Certification Consortium, Inc.

ISC2 welcomes the opportunity to contribute to the European Commissions Call for Evidence on the Digital Omnibus. The initiative is a practical step to reduce administrative burden without compromising cyber resilience and to strengthen Europes digital competitiveness. Practitioners report that incident reporting is fragmented across laws and Member States, which slows response and creates duplicate work.

Please find attached ISC2's response to the public consultation on the proposal for a Directive amending Directive (EU) 2022/2555 (NIS2) as regards simplification measures and alignment with the Cybersecurity Act 2 (COM(2026) 13). This submission focuses on the new ransomware disclosure obligations under Article 23, which directly impact cybersecurity professionals.

Please find attached ISC2's response to the public consultation on the proposal for a Regulation on the European Union Agency for Cybersecurity (ENISA), the European Cybersecurity Certification Framework, and ICT supply chain security (Cybersecurity Act 2, COM(2026) 11).

As a global non-profit association focused on advancing cybersecurity skills, ISC2 welcomes the EU Commissions efforts to remove barriers to mobility while maintaining high standards of competence and trust. The initiative will support labour mobility in the EU and attract global talent.

(ISC)² is an international nonprofit membership association focused on building a safe and secure cyber world. Our membership, more than 300,000 strong globally, with more than 40,000 throughout Europe, consists of certified cybersecurity professionals responsible for securing governments, economies, critical infrastructure, and personal information.

ISC2 welcomes the Commissions initiative to revise the Regulation (EU) No 1025/2012 to enhance EU competitiveness, innovation, and global standard-setting. We propose three recommendations to build a more inclusive standard-setting ecosystem, facilitate effective regulatory compliance, and strengthen cybersecurity, aligning with the EUs Standardisation Strategy and Digital Decade goals. 1.

Please find attached ISC2's contribution to the public consultation on the draft Communication on Commission guidance on the application of Regulation (EU) 2024/2847 (Cyber Resilience Act). This submission welcomes the practical clarity the guidance provides and focuses on the professional competency dimension of the obligations it clarifies, with specific recommendations on Sections 7 and 9.

Please find attached ISC2's feedback to the Call for Evidence for the EU Quantum Act. This submission outlines our support for the proposed Act, with recommendations on integrating post-quantum cryptography migration, establishing a dedicated skills pillar, and ensuring coherence with related digital regulations. We appreciate the opportunity to contribute and remain available for further discussions.

ISC2 feedback on COM(2025) 335, the EU Space Act Executive Summary ISC2 supports the EU Space Act and its focus on resilience, cybersecurity and skilling. We recommend coherence with the wider digital acquis (NIS2, DORA, Cyber Resilience Act) through shared definitions/taxonomies, aligned incident categories/thresholds, and harmonised reporting.

Opening of the attached position paper · the full paper is on the Commission’s record (source link above)

Please find attached ISC2's position paper for the Call for Evidence on the review of the Digital Decade Policy Programme 2030. This submission supports the programme's objectives while advocating for explicit cybersecurity skills sub-targets in the digital skills pillar, backed by dedicated MFF funding to address workforce gaps and regulatory demands.

ISC2 wholeheartedly supports the European Commissions initiative to increase the regions competitiveness through skills development, quality jobs, and increased labour market participation. As the worlds largest membership association for cybersecurity professionals with 40,000+ members in the EU, ISC2 advocates for a particular focus on strengthening the cybersecurity employment landscape.

Please find attached ISC2's position paper for the Call for Evidence on the Communication on the Defence Single Market: EU Technological Base Fit for Future (Ref. Ares(2026)219867). This submission endorses the Commission's focus on overcoming barriers to a stronger European defence technological and industrial base while strongly advocating for dedicated emphasis on cybersecurity workforce development.

(ISC)2 is an international nonprofit membership association focused on building a safe and secure cyber world. Our association has almost 500,000 members, associates, and candidates, globally, including 60,000 in the EU. (ISC)2 recognises the importance of building baseline cybersecurity practices across the EU to make organisations more cyber resilient and better protect individuals.