Choose the experimental features you want to try

This document is an excerpt from the EUR-Lex website

Document 32026D1416

Commission Implementing Decision (EU) 2026/1416 of 30 June 2026 setting up the European Digital Infrastructure Consortium for Cybersecurity Skills Coalition (CSC-EDIC)

C/2026/4104

OJ L, 2026/1416, 1.7.2026, ELI: http://data.europa.eu/eli/dec_impl/2026/1416/oj (BG, ES, CS, DA, DE, ET, EL, EN, FR, GA, HR, IT, LV, LT, HU, MT, NL, PL, PT, RO, SK, SL, FI, SV)

Legal status of the document In force

ELI: http://data.europa.eu/eli/dec_impl/2026/1416/oj

European flag

Official Journal
of the European Union

EN

L series


2026/1416

1.7.2026

COMMISSION IMPLEMENTING DECISION (EU) 2026/1416

of 30 June 2026

setting up the European Digital Infrastructure Consortium for Cybersecurity Skills Coalition (CSC-EDIC)

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Decision (EU) 2022/2481 of the European Parliament and of the Council of 14 December 2022 establishing the Digital Decade Policy Programme 2030 (1) and in particular Article 14(3), point (a) thereof,

Whereas:

(1)

On 23 January 2026, Greece, Austria, Croatia, Cyprus Slovenia, as members, submitted to the Commission an application in accordance with Article 14(1) of Decision (EU) 2022/2481 to set up the European Digital Infrastructure Consortium for Cybersecurity Skills Coalition (CSC-EDIC).

(2)

As the host Member State, Greece has provided a declaration in accordance with Article 14(1), point (d), of Decision (EU) 2022/2481 recognising CSC-EDIC as an international body within the meaning of Article 143(1), point (g), and Article 151(1), point (b), of Council Directive 2006/112/EC (2) and as an international organisation within the meaning of Article 11(1), point (b), of Council Directive (EU) 2020/262 (3).

(3)

The Commission has assessed the application pursuant to Article 14(2) of Decision (EU) 2022/2481. It has concluded that the application contains all elements required by Article 14(1) of Decision (EU) 2022/2481. Taking into account the general objectives of the Digital Decade Policy Programme, notably the contribution of the proposed EDIC to the development of a comprehensive and sustainable ecosystem of interoperable digital infrastructures, and practical considerations related to the implementation of the multi-country project, in particular its technical, financial, administrative capacity of the proposed EDIC, the Commission concluded that the proposed EDIC meets all the specific requirements laid down in Articles 13 to 21 of Decision (EU) 2022/2481.

(4)

In accordance with the Statutes accompanying the application, the principal task of CSC-EDIC will be to implement a multi-country project in the area of skills and training in cybersecurity identified in the Annex to Decision (EU) 2022/2481. The EDIC will support the implementation of the objectives set out in the Commission Communication of 18 April 2023 entitled ‘Closing the cybersecurity talent gap to boost the EU’s competitiveness, growth and resilience’ (COM(2023) 207 final) (the Cybersecurity Skills Academy), with a view to enhancing the Union’s cybersecurity education, training, and workforce development capabilities. In pursuance of this principal task, the CSC-EDIC will address the expanding cybersecurity skills gap and promote capacity building across public authorities, industry and small and medium-sized enterprises in the Member States, thereby reinforcing the competitiveness, growth, and resilience of the Union. To deliver on this objective, the CSC-EDIC will also undertake proactive actions to promote the upskilling and reskilling of professionals in – and transitioning into – cybersecurity, ensuring alignment with workforce needs and skills gaps and regulatory conformity of Union industries and national administrations. Additionally, it will support the implementation of, and adherence to, relevant European legal instruments. This work aligns with the vision of the Union of Skills adopted on 5 March 2025.

(5)

The CSC-EDIC will, as appropriate, coordinate its activities with the European Union Agency for Cybersecurity (ENISA), making use of ENISA-developed tools such as the European Cybersecurity Skills Framework and taking into due account ENISA’s tasks as laid down in Regulation (EU) 2019/881 of the European Parliament and of the Council (4) as well as the proposed role of ENISA in the Commission proposal for a Cybersecurity Act 2 (COM(2026) 11 final). The CSC-EDIC will further leverage opportunities stemming from this proposal. It will also coordinate with the European Cybersecurity Competence Centre (ECCC), pursuant to Regulation (EU) 2021/887 of the European Parliament and of the Council (5), particularly in relation to the advancement of industrial, technological, and research capabilities. To ensure complementarity and synergy across initiatives, the CSC-EDIC will establish collaboration arrangements with ENISA and the ECCC.

(6)

The measures provided for in this Decision are in accordance with opinion of the committee established by Article 23(1) of Decision (EU) 2022/2481.

(7)

In order to allow for the prompt application of the measures provided for in this Decision, namely the start of the operation of CSC-EDIC, which is urgently necessary for the orderly implementation of the Cybersecurity Skills Academy, this Decision should enter into force on the day of its publication in the Official Journal of the European Union.

HAS ADOPTED THIS DECISION:

Article 1

1.   The European Digital Infrastructure Consortium for Cybersecurity Skills Coalition (CSC-EDIC) is set up.

2.   CSC-EDIC shall have legal personality and it shall enjoy, in each of the Member States, the most extensive legal capacity accorded to legal entities under the law of that Member State. It may, in particular, acquire, own and dispose of movable, immovable and intellectual property, conclude contracts and be a party to legal proceedings.

3.   The essential elements of the statutes of CSC-EDIC, as agreed between its members, are set out in the Annex.

Article 2

This Decision shall enter into force on the day of its publication in the Official Journal of the European Union.

Done at Brussels, 30 June 2026.

For the Commission

The President

Ursula VON DER LEYEN


(1)   OJ L 323, 19.12.2022, p. 4, ELI: http://data.europa.eu/eli/dec/2022/2481/oj.

(2)  Council Directive 2006/112/EC of 28 November 2006 on the common system of value added tax (OJ L 347, 11.12.2006, p. 1, ELI: http://data.europa.eu/eli/dir/2006/112/oj).

(3)  Council Directive (EU) 2020/262 of 19 December 2019 laying down the general arrangements for excise duty (OJ L 58, 27.2.2020, p. 4, ELI: http://data.europa.eu/eli/dir/2020/262/oj).

(4)  Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (OJ L 151, 7.6.2019, p. 15, ELI: http://data.europa.eu/eli/reg/2019/881/oj).

(5)  Regulation (EU) 2021/887 of the European Parliament and of the Council of 20 May 2021 establishing the European Cybersecurity Industrial, Technology and Research Competence Centre and the Network of National Coordination Centres (OJ L 202, 8.6.2021, p. 1, ELI: http://data.europa.eu/eli/reg/2021/887/oj).


ANNEX

ESSENTIAL ELEMENTS OF THE STATUTES OF THE CSC-EDIC

1.

Corresponding to Article 17(1), point (c), of Decision (EU) 2022/2481:

Article 2

Name, seat, location and working language

[…]

2.   The name of the EDIC referred to in paragraph (1) shall be ‘Cybersecurity Skills Coalition EDIC’, hereafter referred to as ‘CSC-EDIC’.

3.   CSC-EDIC shall have its statutory seat in Athens, Greece.

2.

Corresponding to Article 17(1), point (d), of Decision (EU) 2022/2481:

Article 28

Duration

CSC-EDIC shall be established for an initial period of ten (10) years without prejudice to Article 29. That period may be extended by a decision of the Assembly of Members.

Article 29

Winding up

1.   The winding up of CSC-EDIC shall be decided by the Assembly of Members in accordance with Article 11.

2.   Without undue delay and in any event within ten (10) calendar days after adoption of the decision to wind up CSC-EDIC, CSC-EDIC shall notify the European Commission about the decision.

3.   Assets remaining after payment of CSC-EDIC debts shall be apportioned among the members in proportion to their accumulated annual contribution to CSC-EDIC as specified in Article 9 or transferred to another legal entity to the extent that this entity continues CSC-EDIC’s activities.

4.   Without undue delay and in any event within ten (10) calendar days of the closure of the winding up procedure, CSC-EDIC shall notify the Commission thereof.

5.   CSC-EDIC shall cease to exist on the day on which the European Commission publishes the appropriate notice in the Official Journal of the European Union.

3.

Corresponding to Article 17(1), point (e), of Decision (EU) 2022/2481:

Article 19

Liability and insurance

1.   CSC-EDIC shall be liable for its debts.

2.   The financial liability of the members for the debts of the CSC-EDIC shall be limited to their respective contributions provided to the CSC-EDIC, as specified in the Annex III.

3.   The Union shall not be liable for CSC- EDIC’s debts.

4.

Corresponding to Article 17(1), point (i), of Decision (EU) 2022/2481:

Article 20

Tax and excise duty exemptions

1.   VAT exemptions based on Articles 143(1)(g) and 151(1)(b) of Council Directive 2006/112/EC and in accordance with Articles 50 and 51 of Council Implementing Regulation (EU) No 282/2011, shall be limited to purchases by CSC-EDIC and by members of CSC-EDIC which are for the official and exclusive use by CSC-EDIC provided that such purchase is made solely for the non-economic activities of CSC-EDIC in line with its activities. The conditions to qualify for recognition as an international body for the application of Article 143(1)(g) and Article 151(1)(b) of Directive 2006/112/EC laid down in Article 50 of Implementing Regulation (EU) No 282/2011 shall be complied with mutatis mutandis by CSC-EDIC.

2.   VAT exemptions shall be limited to purchases exceeding the value of EUR 300.

3.   Excise Duty exemptions based on Article 11 of Council Directive 2020/262, shall be limited to purchases by CSC-EDIC which are for the official and exclusive use by CSC-EDIC provided that such purchase is made solely for the non-economic activities of CSC-EDIC in line with its activities and that the purchase exceeds the value of EUR 300.


ELI: http://data.europa.eu/eli/dec_impl/2026/1416/oj

ISSN 1977-0677 (electronic edition)


Top