No. Organizations do not report directly to ENISA.

They must report to:

  • The national CSIRT, or
  • The competent authority

ENISA receives aggregated reports from Member States, not from individual entities.