News

On 12. March 2024, the European Parliament approved the Cyber Resilience Act (CRA). The approval follows the agreement on the Act with the Council of the European Union on December 1, 2023. The CRA aims to ensure that products with digital features are secure to use, resilient against cyber threats and provide…

We are pleased to announce that we carry on the tradition of the Global IoT Day Roundtable with our upcoming event on 8. April 2024. This year’s topic is: "IoT supply chain security: challenges and impacts". Join the experts from the European Commission, ENISA, NIST, ETSI, ECSO, BEUC, TUVIT, and EY, as…

To secure IoT, security needs to be considered at all stages of the supply chain - design phase, implementation phase, distribution phase, deployment phase, operational phase, upgrading phase, and decommissioning phase. We have identified, analysed, and selected 174 requirements from a number of guidelines, best practices, standards, regulations, and other…

On 7. February 2024, the Commission published the first Union Rolling Work Programme for European cybersecurity certification. The work programme fulfils the requirement of the Cybersecurity Act, Title III: the European Cybersecurity Certification Framework, for the establishment of voluntary European cybersecurity certification schemes. While three European cybersecurity certification schemes under…

In its research report “The Anatomy of Cybersecurity: A Dissection of 2023’s Attack Landscape” Armis analyses proprietary data and offers a snapshot into the global cybersecurity landscape. In 2023, the number of attack attempts rose by 104% globally. The Utilities Industry saw an increase of more than 200%, while in…

Capgemini conducted a global survey of more than 10,000 consumers in November 2023 to understand consumer interest in consumer-facing connected products – wearables, home automation, health monitoring products, and fitness systems. The report explores the topic in-depth, but we summon here only the most relevant findings from our perspective. 67%…

The updated Network and Information Security Directive (NIS2) has been in force since 1 January 2023, with member states having time until 17 October 2024 to implement it into law. In Hungary for example, which has already enacted its law on cybersecurity certification and cybersecurity supervision, implementing the NIS2, the…

Keyfactor analyzed the survey responses of 1200 IoT and connected product professionals from the US, UK, Germany, France, Australia, China, and Japan, working both for OEMs and for organizations that use or operate IoT and connected devices. The survey took place in June and July 2023. The key findings are:…

The European Union and the United States committed to work together on achieving mutual recognition of their respective government-backed cybersecurity labelling programs and regulations for IoT devices, namely the EU Cyber Resilience Act and the U.S. Cyber Trust Mark. Started at the October 2023 EU-US Summit, the discussion continued at…