47 trusted private providers are now formally available to assist Ukraine through the EU Cybersecurity Reserve, after the Council of the EU approved the country's inclusion on June 16.
Council of the EU approval on June 16
On June 16 the Council of the EU — the institution that represents member states' governments — approved Ukraine’s inclusion in the EU Cybersecurity Reserve. The decision allows the Ukrainian government to activate emergency EU cyber support to respond to significant or large-scale cyber-attacks and cyber incidents that affect one of its organisations or businesses. The move applies despite Ukraine not yet being an EU member state; the source notes Ukraine is officially recognised as a candidate for EU membership alongside eight other countries.
ENISA and the mechanics of the EU Cybersecurity Reserve
The Reserve is managed by the EU Agency for Cybersecurity (ENISA) and provides incident response services to shore up defences during major cyber incidents. The Reserve is established under the EU Cyber Solidarity Act, which came into force in February 2025 and supplies the legal basis for this collective-response mechanism. ENISA’s role is to coordinate access to the Reserve’s capabilities when a qualifying incident is identified and activated by the beneficiary government.
47 trusted private providers and the Ownership Control Assessment (OCA)
The Reserve draws on 47 trusted private providers that have passed an Ownership Control Assessment (OCA). According to the available record, the OCA is a test used to determine whether a provider is directly or indirectly controlled by people and entities within EU member states. Only providers that successfully completed this assessment are listed as trusted suppliers to handle incident response services through the Reserve.
€36m in the Digital Europe Work Programme 2025–2027
The EU Cybersecurity Reserve is part of the Digital Europe Work Programme 2025–2027. That work programme allocates €36m (listed in the source as $41.8m) to enhance response and reporting for cyber threats and incidents across the EU. Those funds are intended to support the Reserve’s operation and improve collective capabilities for handling significant cyber events among participating states and, where approved, partner countries.
What this means for Ukrainian organisations, ENISA, and EU policymakers
- Ukrainian organisations and businesses: They gain a formal route to request and receive incident response services through the Reserve when a large-scale cyber incident occurs, under activation by the Ukrainian government.
- ENISA and trusted providers: ENISA will coordinate deployment of the 47 vetted providers whose participation rests on passing the OCA; those providers are now eligible to deliver incident response services to Ukraine under the Reserve framework.
- EU policymakers and candidate-country relations: The Council’s June 16 approval builds on a precedent: Moldova, also not an EU member state, was included in the Reserve in 2024. The action demonstrates the use of the EU Cyber Solidarity Act to extend emergency cyber support beyond member-state borders under defined conditions.
Henna Virkkunen, executive vice-president for tech sovereignty, security and democracy at the European Commission, framed the decision in terms of collective defence and shared principles: "By welcoming Ukraine into the EU Cybersecurity Reserve, we strengthen our collective defences and reaffirm the principle of solidarity that lies at the heart of Europe's digital future," she said.
The institutional steps are clear: legal authority provided by the EU Cyber Solidarity Act (in force since February 2025), operational management by ENISA, a vetted pool of 47 providers, and financial support linked to the Digital Europe Work Programme 2025–2027. What remains implicit in the record is how frequently the Reserve will be activated for partner countries and the operational timelines for deploying providers once a government requests help — details the public summary does not specify. For now, the Council’s decision on June 16 signals a concrete, funded pathway for Ukraine to draw on EU cyber-response capabilities when large-scale incidents strike.
