The EU Cyber Regulatory Train Is on the Move – and It’s Not Slowing Down

The EU has been steadily expanding its cybersecurity regulatory framework over the past decade, with headline regimes such as NIS2 and DORA now moving into the implementation phase. Parts of the Cyber Resilience Act (CRA) will follow later this year, introducing significant cybersecurity requirements for connected products (including software). In parallel, the European Commission has proposed updates to the Cyber Security Act—including far-reaching supply chain measures and the ability for the Commission to designate suppliers from certain countries as high-risk—and targeted amendments to NIS2.

Against this backdrop, companies find themselves not only handling initial compliance under NIS2 and DORA, but also preparing for next waves of cyber regulatory change.

In this webinar, we will share key lessons emerging from early implementation of NIS2 and DORA, and outline what is still to come.