Regulations & directives in force

Cybersecurity obligations for essential/important entities across 18 sectors.

All-hazards physical resilience of critical entities; NIS2's physical twin.

ENISA's mandate + the EU cybersecurity certification framework.

EU-level detection (Cyber Shield), emergency mechanism, incident review.

ICT-risk regime for the financial sector; lex specialis to NIS2.

Security by design for every product with digital elements; CE marking.

Cybersecurity for connected radio equipment / IoT; on-ramp to the CRA.

Security of processing (Art. 32) and 72h breach notification (Art. 33/34).

EU Digital Identity Wallet and trust-service security.

Cybersecurity/robustness for high-risk AI (Art. 15) and systemic GPAI (Art. 55).

NCCS, Machinery Reg, Product Liability Directive, cybercrime directive, ePrivacy, Data Act, soft law.