Coordinated cybersecurity vulnerability disclosure (CVD) policies in Europe are unfortunately not universal; likewise, legislation to protect ethical hackers still has a way to go. The European Cybersecurity Agency (ENISA) could do more at an EU-wide level to help good faith researchers protect critical digital resources.
european union
The EU Cyber Resilience Act – A Brief-ish and Sloppy Overview
The EU’s Cyber Resilience Act (CRA) recently gained political agreement, and is in the process of being adopted by the parliament. This expansive regulation will deeply affect how ICT products are designed, sold, and maintained in a more secure manner throughout the EU.
🔍 Exploring the Nexus: NIST Framework vs. DORA Regulation in the Financial Sector 🌐💼
CyAN member Gilles Chevillon shares an analysis of the Digital Operational Resilience Act, the European Union’s flagship regulation governing cybersecurity in the financial sector.