The European Union Agency for Network and Information Security (ENISA) is responsible for providing network and information security (NIS) in the European Union. The ENISA provides a framework for developing and promoting a culture of security to ensure NIS. However, there are drawbacks in the system configuration that hinder the effectiveness of the ENISA's security policy. Specifically, the agency lacks uniform administration across different types of threats, which can lead to different outcomes. Additionally, there is a gap in operators' understanding of DNS spoofing, and APIs should be made more secure to address this threat landscape.