International Information System Security Certification Consortium, Inc.

Please find attached ISC2's response to the public consultation on the proposal for a Directive amending Directive (EU) 2022/2555 (NIS2) as regards simplification measures and alignment with the Cybersecurity Act 2 (COM(2026) 13). This submission focuses on the new ransomware disclosure obligations under Article 23, which directly impact cybersecurity professionals.

Please find attached ISC2's response to the public consultation on the proposal for a Regulation on the European Union Agency for Cybersecurity (ENISA), the European Cybersecurity Certification Framework, and ICT supply chain security (Cybersecurity Act 2, COM(2026) 11).

As a global non-profit association focused on advancing cybersecurity skills, ISC2 welcomes the EU Commissions efforts to remove barriers to mobility while maintaining high standards of competence and trust. The initiative will support labour mobility in the EU and attract global talent.

Please find attached ISC2's contribution to the public consultation on the draft Communication on Commission guidance on the application of Regulation (EU) 2024/2847 (Cyber Resilience Act). This submission welcomes the practical clarity the guidance provides and focuses on the professional competency dimension of the obligations it clarifies, with specific recommendations on Sections 7 and 9.

ISC2 welcomes the Commissions initiative to revise the Regulation (EU) No 1025/2012 to enhance EU competitiveness, innovation, and global standard-setting. We propose three recommendations to build a more inclusive standard-setting ecosystem, facilitate effective regulatory compliance, and strengthen cybersecurity, aligning with the EUs Standardisation Strategy and Digital Decade goals. 1.

Please find attached ISC2's feedback to the Call for Evidence for the EU Quantum Act. This submission outlines our support for the proposed Act, with recommendations on integrating post-quantum cryptography migration, establishing a dedicated skills pillar, and ensuring coherence with related digital regulations. We appreciate the opportunity to contribute and remain available for further discussions.

ISC2 feedback on COM(2025) 335, the EU Space Act Executive Summary ISC2 supports the EU Space Act and its focus on resilience, cybersecurity and skilling. We recommend coherence with the wider digital acquis (NIS2, DORA, Cyber Resilience Act) through shared definitions/taxonomies, aligned incident categories/thresholds, and harmonised reporting.

Opening of the attached position paper · the full paper is on the Commission’s record (source link above)

Please find attached ISC2's position paper for the Call for Evidence on the review of the Digital Decade Policy Programme 2030. This submission supports the programme's objectives while advocating for explicit cybersecurity skills sub-targets in the digital skills pillar, backed by dedicated MFF funding to address workforce gaps and regulatory demands.

Please find attached ISC2's position paper for the Call for Evidence on the Communication on the Defence Single Market: EU Technological Base Fit for Future (Ref. Ares(2026)219867). This submission endorses the Commission's focus on overcoming barriers to a stronger European defence technological and industrial base while strongly advocating for dedicated emphasis on cybersecurity workforce development.