Anna Marton, Safepay Systems

On 7. February 2024, the Commission published the first Union Rolling Work Programme for European cybersecurity certification. The work programme fulfils the requirement of the Cybersecurity Act, Title III: the European Cybersecurity Certification Framework, for the establishment of voluntary European cybersecurity certification schemes. While three European cybersecurity certification schemes under…

In its research report “The Anatomy of Cybersecurity: A Dissection of 2023’s Attack Landscape” Armis analyses proprietary data and offers a snapshot into the global cybersecurity landscape. In 2023, the number of attack attempts rose by 104% globally. The Utilities Industry saw an increase of more than 200%, while in…

Capgemini conducted a global survey of more than 10,000 consumers in November 2023 to understand consumer interest in consumer-facing connected products – wearables, home automation, health monitoring products, and fitness systems. The report explores the topic in-depth, but we summon here only the most relevant findings from our perspective. 67%…

The updated Network and Information Security Directive (NIS2) has been in force since 1 January 2023, with member states having time until 17 October 2024 to implement it into law. In Hungary for example, which has already enacted its law on cybersecurity certification and cybersecurity supervision, implementing the NIS2, the…

Keyfactor analyzed the survey responses of 1200 IoT and connected product professionals from the US, UK, Germany, France, Australia, China, and Japan, working both for OEMs and for organizations that use or operate IoT and connected devices. The survey took place in June and July 2023. The key findings are:…

The European Union and the United States committed to work together on achieving mutual recognition of their respective government-backed cybersecurity labelling programs and regulations for IoT devices, namely the EU Cyber Resilience Act and the U.S. Cyber Trust Mark. Started at the October 2023 EU-US Summit, the discussion continued at…

On 30 November 2023, the European Parliament and the Council reached a political agreement on the Cyber Resilience Act (CRA). However, the co-legislators agreed to propose certain adjustments about: the scope of the CRA, with a simpler methodology for the classification of digital products to be covered; the support period was amended…